Your SCIM endpoint is an admin API. A default bearer token and a PATCH path parser left Perforce’s open to anyone who knew the token and, in one test, to running code. Here is what to check in your own.
How to secure a SCIM endpoint: Lessons from CVE-2026-109758
calendar_today
October 13, 2026
domain
workos