CVE-2026-126570 | Padloc up to 4.3.0 SCIM ScimServer._handleScimUsersPatch prototype pollution

November 11, 2026 Yanac

A vulnerability was found in Padloc up to 4.3.0. It has been declared as problematic. The impacted element is the function ScimServer._handleScimUsersPatch of the component SCIM Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes.

The identification of this vulnerability is CVE-2026-126570. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More