[ CVE-2026-100103 · Published 5 Oct 2026 ]
Vulnerability in Perfoce P4 (Helix Core)
CVSS 10.0
EPSS <1%No fix listed yet
[ Why it matters ]Priority signals
- Critical severity: CVSS 10.0
[ Description ]Official description
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the connected P4 Server.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.