Product by Perforce

    P4 (helix Core)

    8 known vulnerabilities in P4 (helix Core) (Perforce), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in P4 (helix Core) (Perforce)
    CriticalCVE-2026-103510

    Authentication bypass via blank auth token in P4Search

    —
    CriticalCVE-2026-100102

    RCE via exposed JDWP debug agent in P4Search

    —
    HighCVE-2026-103507

    Arbitrary file-write via log configuration path in P4Search

    —
    HighCVE-2026-103508

    Path traversal via logging configuration in P4Search

    —
    HighCVE-2026-103509

    Credential Disclosure in P4 Search Configuration API

    —
    HighCVE-2026-6902

    Code Injection in Perforce P4 (Helix Core)

    —
    MediumCVE-2026-103512

    Ticket host-binding bypass via spoofed client IP in P4Search

    —
    MediumCVE-2026-103511

    Arbitrary file-write via extension installation in P4Search

    —

    All products by Perforce