Perforce vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20258
3. 202616

Newest CVEs

• CVE-2026-115731

  Report Deserialization Code Execution

  Perforce · Puppet Enterprise

  Critical9.4
• CVE-2026-115732

  Certificate Name Authorization Bypass

  Perforce · Puppet Enterprise

  Critical9.0
• CVE-2026-103509

  Credential Disclosure in P4 Search Configuration API

  Perforce · P4 (Helix core)

  High8.5
• CVE-2026-103508

  Path traversal via logging configuration in P4Search

  Perforce · P4 (Helix core)

  High7.3
• CVE-2026-109758

  Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM…

  Perforce · Helix Authentication Service

  Critical9.3
• CVE-2026-103510

  Authentication bypass via blank auth token in P4Search

  Perforce · P4 (Helix Core)

  Critical9.5
• CVE-2026-103511

  Arbitrary file-write via extension installation in P4Search

  Perforce · P4 (Helix Core)

  Medium5.1
• CVE-2026-103512

  Ticket host-binding bypass via spoofed client IP in P4Search

  Perforce · P4 (Helix Core)

  Medium5.3
• CVE-2026-103507

  Arbitrary file-write via log configuration path in P4Search

  Perforce · P4 (Helix Core)

  High7.5
• CVE-2026-100102

  RCE via exposed JDWP debug agent in P4Search

  Perforce · P4 (Helix Core)

  Critical9.5