{"items":[{"id":"CVE-2026-115731","published":"2026-11-03T20:40:10.100Z","updated":"2026-11-06T19:36:39.577Z","title":"Report Deserialization Code Execution","severity":"CRITICAL","score":9.4,"vendor":"Perforce","product":"Puppet Enterprise","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2026-115732","published":"2026-11-03T20:38:24.169Z","updated":"2026-11-06T19:39:07.902Z","title":"Certificate Name Authorization Bypass","severity":"CRITICAL","score":9,"vendor":"Perforce","product":"Puppet Enterprise","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2026-103509","published":"2026-10-15T14:41:28.829Z","updated":"2026-10-15T17:58:34.271Z","title":"Credential Disclosure in P4 Search Configuration API","severity":"HIGH","score":8.5,"vendor":"Perforce","product":"P4 (Helix core)","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-103508","published":"2026-10-15T14:02:19.129Z","updated":"2026-10-15T18:14:22.594Z","title":"Path traversal via logging configuration in P4Search","severity":"HIGH","score":7.3,"vendor":"Perforce","product":"P4 (Helix core)","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2026-109758","published":"2026-10-13T04:00:04.703Z","updated":"2026-10-15T16:48:10.801Z","title":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM…","severity":"CRITICAL","score":9.3,"vendor":"Perforce","product":"Helix Authentication Service","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-103510","published":"2026-10-05T08:44:56.686Z","updated":"2026-10-05T12:17:56.278Z","title":"Authentication bypass via blank auth token in P4Search","severity":"CRITICAL","score":9.5,"vendor":"Perforce","product":"P4 (Helix Core)","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2026-103511","published":"2026-10-05T08:40:35.022Z","updated":"2026-10-05T12:29:55.650Z","title":"Arbitrary file-write via extension installation in P4Search","severity":"MEDIUM","score":5.1,"vendor":"Perforce","product":"P4 (Helix Core)","kev":false,"epss":0.00328,"kevAdded":null},{"id":"CVE-2026-103512","published":"2026-10-05T08:36:55.057Z","updated":"2026-10-05T12:34:32.028Z","title":"Ticket host-binding bypass via spoofed client IP in P4Search","severity":"MEDIUM","score":5.3,"vendor":"Perforce","product":"P4 (Helix Core)","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2026-103507","published":"2026-10-05T08:31:12.818Z","updated":"2026-10-05T13:38:51.831Z","title":"Arbitrary file-write via log configuration path in P4Search","severity":"HIGH","score":7.5,"vendor":"Perforce","product":"P4 (Helix Core)","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2026-100102","published":"2026-10-05T08:27:18.763Z","updated":"2026-10-05T13:14:31.402Z","title":"RCE via exposed JDWP debug agent in P4Search","severity":"CRITICAL","score":9.5,"vendor":"Perforce","product":"P4 (Helix Core)","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2026-89212","published":"2026-09-11T13:23:56.485Z","updated":"2026-09-11T13:57:07.579Z","title":"XML External Entity in Akana API Platform","severity":"CRITICAL","score":9.2,"vendor":"Perforce","product":"Akana","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2026-85978","published":"2026-09-09T10:31:55.863Z","updated":"2026-09-09T14:19:29.425Z","title":"Unauthenticated Remote Code Execution in Akana API Platform","severity":"CRITICAL","score":10,"vendor":"Perforce","product":"Akana","kev":false,"epss":0.01439,"kevAdded":null},{"id":"CVE-2026-14254","published":"2026-07-16T14:12:56.347Z","updated":"2026-07-16T14:54:33.736Z","title":"Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data","severity":"HIGH","score":8.3,"vendor":"Perforce","product":"Delphix Continuous Data","kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2026-8804","published":"2026-07-03T07:40:15.684Z","updated":"2026-07-06T15:21:55.981Z","title":"Cleartext Storage of Sensitive Information for Puppet Resource API","severity":"MEDIUM","score":6.7,"vendor":"Perforce","product":"Puppet Core","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-6902","published":"2026-05-18T07:49:16.460Z","updated":"2026-05-20T05:49:13.390Z","title":"Code Injection in Perforce P4 (Helix Core)","severity":"HIGH","score":7.7,"vendor":"Perforce","product":"P4 (Helix Core)","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2026-6043","published":"2026-04-24T11:02:50.723Z","updated":"2026-04-28T12:12:01.630Z","title":"Insecure Default Configuration in P4 Server","severity":"HIGH","score":8.8,"vendor":"Perforce","product":"Helix Core Server (P4D)","kev":false,"epss":0.0126,"kevAdded":null},{"id":"CVE-2025-14591","published":"2025-12-20T03:04:21.183Z","updated":"2025-12-22T16:11:52.890Z","title":"PII Leak Due to Change in EOR Handling","severity":"MEDIUM","score":5.3,"vendor":"Perforce","product":"Delphix Continuous Compliance","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2025-13472","published":"2025-12-03T08:42:27.305Z","updated":"2025-12-03T14:21:10.953Z","title":"Missing authorization in BlazeMeter Jenkins Plugin","severity":"MEDIUM","score":5.3,"vendor":"Perforce","product":"BlazeMeter","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2025-10360","published":"2025-09-24T15:49:47.210Z","updated":"2025-09-24T16:12:48.979Z","title":"Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5","severity":"MEDIUM","score":6.9,"vendor":"Perforce","product":"Puppet Enterprise","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2025-5459","published":"2025-06-26T06:30:56.546Z","updated":"2026-09-04T01:16:09.883Z","title":"OS Command Injection","severity":"HIGH","score":8.6,"vendor":"Perforce","product":"Puppet Enterprise","kev":false,"epss":0.01098,"kevAdded":null},{"id":"CVE-2025-2903","published":"2025-04-17T06:50:11.131Z","updated":"2025-04-17T17:44:16.318Z","title":"Privilege Chaining in Delphix","severity":"HIGH","score":8.5,"vendor":"Perforce","product":"Delphix","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2025-3113","published":"2025-04-17T06:41:47.667Z","updated":"2025-04-17T19:00:48.208Z","title":"Improper Access Control in Delphix Masking Engine","severity":"CRITICAL","score":9,"vendor":"Perforce","product":"Delphix","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2024-11084","published":"2025-04-15T15:34:31.149Z","updated":"2025-04-15T15:58:29.394Z","title":"Potential Username Enumeration in Helix ALM","severity":"MEDIUM","score":6.3,"vendor":"Perforce","product":"Helix ALM","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2025-1714","published":"2025-03-05T14:56:53.962Z","updated":"2025-03-07T04:37:18.431Z","title":"Username Enumeration in Gliffy","severity":"MEDIUM","score":6.9,"vendor":"Perforce","product":"Gliffy","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2024-3995","published":"2024-06-28T19:46:47.992Z","updated":"2024-08-01T20:26:57.268Z","title":"Command Injection in Helix ALM","severity":"LOW","score":2,"vendor":"Perforce","product":"Helix ALM","kev":false,"epss":0.00612,"kevAdded":null}]}