[ Vendor · 8 CVEs ]
Perforce
CVEs affecting Perforce published in the last 30 days, plus any Perforce CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103508 | 15 Oct 2026 | CVSS 7.3 | Perforce P4 (Helix core)P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted… | |
| CVE-2026-103509 | 15 Oct 2026 | CVSS 8.5 | Perforce P4 (Helix core)P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on… | |
| CVE-2026-109758 | 13 Oct 2026 | CVSS 9.3 | Perforce Helix Authentication ServicePerforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when… | |
| CVE-2026-103511 | 5 Oct 2026 | CVSS 5.1 | Perforce P4 (Helix Core)Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or… | |
| CVE-2026-103512 | 5 Oct 2026 | CVSS 5.3 | Perforce P4 (Helix Core)Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen… | |
| CVE-2026-103507 | 5 Oct 2026 | CVSS 7.5 | Perforce P4 (Helix Core)Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the… | |
| CVE-2026-103510 | 5 Oct 2026 | CVSS 9.5 | Perforce P4 (Helix Core)P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated… | |
| CVE-2026-100102 | 5 Oct 2026 | CVSS 9.5 | Perforce P4 (Helix Core)Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this… |