Unverified50% confidenceEventExact time
Perforce disclosed the CVE-2026-109758 vulnerability, which involves issues with default tokens and a PATCH path parser in its SCIM implementation.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/13/2026
First Seen
Valid until: 1/11/2027
Sources
Related Entities
Related Claims
UnverifiedPerforce's SCIM PATCH path parser fails to properly filter input, allowing attackers to construct malicious paths that break out of the intended attribute modification scope, and in some tests even allowing arbitrary code execution.74% similarUnverifiedPerforce's SCIM implementation allows authentication using the default bearer token publicly documented in the documentation and does not mandate changing it, so an attacker only needs to know the token value to call the SCIM API with administrator privileges.66% similarUnverifiedHistorical RouterOS vulnerabilities include CVE-2018-14847, a Winbox protocol vulnerability (allowing unauthorized users to read arbitrary files), and CVE-2019-3976, an SMB stack overflow (enabling remote code execution).66% similarUnverifiedThe CVE-2024-21626 vulnerability exploited a file descriptor leak in runc when handling working directories to achieve container escape, and emerged in early 2024.63% similarUnverifiedLinux内核曾因编译器优化掉空指针检查而引入安全漏洞CVE-2009-189762% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1019873API
curl https://kongchang.com/api/v1/knowledge/claims/1019873MCP
get_claim(id=1019873)