https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T08:50:23.294434+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121454 fkie_cve-2026-121454 2026-11-05T08:50:23.319567+00:00

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve provisioned usernames, emails, names, externalIds, and group memberships.

 https://db.gcve.eu/vuln/ghsa-8qrv-3gh4-gx4r GHSA-8qrv-3gh4-gx4r 2026-11-05T08:50:23.319655+00:00

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve provisioned usernames, emails, names, externalIds, and group memberships.