Product by Perforce
P4 (helix Core)
8 known vulnerabilities in P4 (helix Core) (Perforce), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-103510 | Authentication bypass via blank auth token in P4Search | — | |
| Critical | CVE-2026-100102 | RCE via exposed JDWP debug agent in P4Search | — | |
| High | CVE-2026-103507 | Arbitrary file-write via log configuration path in P4Search | — | |
| High | CVE-2026-103508 | Path traversal via logging configuration in P4Search | — | |
| High | CVE-2026-103509 | Credential Disclosure in P4 Search Configuration API | — | |
| High | CVE-2026-6902 | Code Injection in Perforce P4 (Helix Core) | — | |
| Medium | CVE-2026-103512 | Ticket host-binding bypass via spoofed client IP in P4Search | — | |
| Medium | CVE-2026-103511 | Arbitrary file-write via extension installation in P4Search | — |