Advisories · Technology

Perforce Puppet Enterprise.

Every CVE that names Perforce Puppet Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115731 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Report Deserialization Code Execution
- Perforce Puppet Enterprise
- Code injection
- Insecure deserialization
Not analysed yet 3 Nov 2026
CVE-2026-115732 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Certificate Name Authorization Bypass
- Perforce Puppet Enterprise
- Broken access control
- CWE-697
Not analysed yet 3 Nov 2026
CVE-2026-8804 CVE record

CVSS 6.7 Medium

Cleartext Storage of Sensitive Information for Puppet Resource API
- Perforce Puppet Core
- Perforce Puppet Enterprise
- Information disclosure
- CWE-313
Not analysed yet 3 Jul 2026
CVE-2025-10360 CVE record

CVSS 6.9 Medium

Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
- Perforce Puppet Enterprise
- Hard-coded credentials
Not analysed yet 24 Sept 2025
CVE-2025-5459 CVE record

CVSS 8.6 High

OS Command Injection
- Perforce Puppet Enterprise
- Command injection
Not analysed yet 26 Jun 2025