Vendor

    Puppet

    132 known vulnerabilities in products by Puppet, 0 of them actively exploited (CISA KEV).

    Key figures

    132

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    18

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Puppet
    HighCVE-2017-7529

    Nginx: Integer Overflow or Wraparound

    also in 3 other products

    		7.5
    CriticalCVE-2016-2785

    Puppet: security vulnerability

    		9.8
    HighCVE-2020-7943

    Puppet Enterprise 2018.1.x stream: Incorrect Default Permissions

    		7.5
    HighCVE-2026-85979

    Command Injection in Puppet Enterprise

    		—
    CriticalCVE-2016-2788

    Puppet Enterprise: Code Execution

    		9.8
    HighCVE-2025-5459

    OS Command Injection

    also in 1 other product

    		8.8
    CriticalCVE-2014-0175

    Mcollective: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2016-5713

    Puppet Agent: security vulnerability

    		9.8
    HighCVE-2017-2295

    Puppet server: Deserialization of Untrusted Data

    also in 1 other product

    		8.2
    CriticalCVE-2018-6512

    Puppet Pe-razor-server: Code Execution

    		9.8
    CriticalCVE-2022-3275

    Puppetlabs-apt Command Injection

    also in 1 other product

    		8.4
    CriticalCVE-2017-2292

    Puppet Mcollective: Deserialization of Untrusted Data

    		9.0
    HighCVE-2015-7330

    Puppet Enterprise: security vulnerability

    		8.8
    CriticalCVE-2015-7224

    Puppet puppetlabs-mysql: Authentication Bypass

    		9.8
    CriticalCVE-2016-2786

    Puppet Agent: security vulnerability

    		9.8
    HighCVE-2016-5716

    Puppet Enterprise: Remote Code Execution

    		8.8
    HighCVE-2022-3276

    Puppetlabs-mysql Command Injection

    		8.4
    HighCVE-2016-5714

    Puppet Enterprise: Code Execution

    		7.2
    CriticalCVE-2021-27023

    Puppet Agent: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2018-6508

    Puppet Enterprise: security vulnerability

    		8.0
    MediumCVE-2015-1855

    Ruby: security vulnerability

    also in 3 other products

    		5.9
    CriticalCVE-2023-2530

    Puppet Enterprise: Privilege Escalation

    		9.8
    CriticalCVE-2018-11746

    Puppet Discovery can leak authentication information

    		8.6
    CriticalCVE-2019-10694

    Puppet Enterprise: security vulnerability

    		9.8
    HighCVE-2021-27021

    Puppet DB: OWASP Top Ten 2017 Category A1 - Injection

    		8.8

    All vulnerabilities in search

    Products

    Products by Puppet
    Puppet Enterprise1060
    Puppet Agent430
    Puppet Agent140
    Puppet server90
    Continuous Delivery for Puppet Enterprise (CD4PE)40
    Puppet puppetlabs-mysql40
    Puppetdb30
    Puppet Marionette Collective30