What’s Vulnerable › Products

Perforce P4 (Helix Core) vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Perforce P4 (Helix Core) version is affected

Latest Perforce P4 (Helix Core) vulnerabilities

• CVE-2026-103509 — Credential Disclosure in P4 Search Configuration API (CVSS 8.5)
• CVE-2026-103508 — Path traversal via logging configuration in P4Search (CVSS 7.3)
• CVE-2026-103512 — Ticket host-binding bypass via spoofed client IP in P4Search (CVSS 5.3)
• CVE-2026-103511 — Arbitrary file-write via extension installation in P4Search (CVSS 5.1)
• CVE-2026-103510 — Authentication bypass via blank auth token in P4Search (CVSS 9.5)
• CVE-2026-103507 — Arbitrary file-write via log configuration path in P4Search (CVSS 7.5)
• CVE-2026-100102 — RCE via exposed JDWP debug agent in P4Search (CVSS 9.5)
• CVE-2026-6902 — Code Injection in Perforce P4 (Helix Core) (CVSS 7.7)