CVE-2026-103509— Credential Disclosure in P4 Search Configuration API
Quick assessment
Affected
Perforce P4 (Helix core)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
P4 Search（前身为 Helix Search）通过其配置 API，以明文形式向拥有已连接 P4 Server 管理员权限的用户返回存储的凭据，从而导致权限提升。 该漏洞影响版本 2026.4.2 及更早版本，已在 2026.4.3 版本中修复。
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Perforce | P4 (Helix core) | ≤ 2026.4.3 |
affected |
2026.4.3 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103509
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Credential Disclosure in P4 Search Configuration API
Source: CVE Program / CVE List V5
Vulnerability Description
P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.
This affects 2026.4.2 and earlier and is fixed in 2026.4.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1220
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Perforce | P4 (Helix core) | 0 ~ 2026.4.3 | - |
|
II. Public POCs for CVE-2026-103509
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103509
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-103509 (1)
IV. Related Vulnerabilities
Same product: P4 (Helix core)
-
CVE-2026-103508
Path traversal via logging configuration in P4Search -
CVE-2026-103510
Authentication bypass via blank auth token in P4Search -
CVE-2026-103511
Arbitrary file-write via extension installation in P4Search -
CVE-2026-103512
Ticket host-binding bypass via spoofed client IP in P4Search -
CVE-2026-103507
Arbitrary file-write via log configuration path in P4Search
Same vendor: Perforce
-
CVE-2026-103508
Path traversal via logging configuration in P4Search -
CVE-2026-109758
Perforce HAS 2022.1-2025.2 默认凭证致未授权访问 -
CVE-2026-103510
Authentication bypass via blank auth token in P4Search -
CVE-2026-103511
Arbitrary file-write via extension installation in P4Search -
CVE-2026-103512
Ticket host-binding bypass via spoofed client IP in P4Search
Same weakness: CWE-1220
-
CVE-2026-70216
Windows Mobile Device Management Tampering Vulnerability -
CVE-2026-81969
Windows Server Update Service Elevation of Privilege Vulnera -
CVE-2026-83499
Windows Server Update Service Elevation of Privilege Vulnera -
CVE-2026-70218
Windows StateRepository API Elevation of Privilege Vulnerabi -
CVE-2026-14210
Insufficient Granularity of Access Control in GitLab
V. Comments for CVE-2026-103509
No comments yet