Skip to content

Perforce Helix Authentication Service

CVE-2026-109758 Critical 9.3 Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In a 0.4%