Skip to content
OpenAdvisories

Vendor

padloc

3 known vulnerabilities.

Products

padloc 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-121454

    Padloc before 4.3.1 Missing SCIM Token Validation via SCIM GET Requests

    Padloc before 4.3.1 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users …

    padloc padloc