CVE-2025-10149 - Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover
CVE ID :CVE-2025-10149 Published : Oct. 19, 2026, 5:16 p.m. | 48 minutes ago Description :The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same...