Skip to content
OpenAdvisories

Product · Perforce

P4 (Helix Core)

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-103510

    Authentication bypass via blank auth token in P4Search

    P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P…

    Perforce P4 (Helix Core)
  • Critical 9.5
    CVE-2026-100102

    RCE via exposed JDWP debug agent in P4Search

    Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the conne…

    Perforce P4 (Helix Core)