TI-2026-84347 CVE-2026-121454 · GHSA-8qrv-3gh4-gx4r
Missing SCIM token validation in Padloc exposes directory data
Priority MEDIUM 61
Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token.