CVE-2026-103508highCWE-23

CVE-2026-103508: falha de alta gravidade em Perforce P4 (Helix core)

Path traversal via logging configuration in P4Search

Publicada em

Seguir esta CVE+ Monitorar P4

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 0.4%
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Produtos afetados
Perforce · P4 (Helix core)
CVEs relacionadas — Perforce P4 (Helix core)

No mesmo produto, das mais perigosas para as menos.

CVE-2026-103509HIGHCredential Disclosure in P4 Search Configuration APIEPSS 0.2%