Perfoce vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Perfoce products: 1 record(s), with severity, exploitation and fixes.

P4 (Helix Core) 1

Exploited only (KEV) →

CVE-2026-100103 Critical · 10.0 CWE-1392 Oct 5, 2026

Authentication bypass via default auth token in P4Search

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the connected P4 Server.