Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115732— Certificate Name Authorization Bypass

Quick assessment

Affected
Perforce Puppet Enterprise
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在受影响的产品中，Puppet Server 所使用的 组件在证书名称匹配时存在授权逻辑缺陷。该漏洞允许持有由证书颁发机构（CA）签发的、其名称为已授权主机名之扩展或缩短形式的证书的客户，被错误地授权为该主机。攻击者可借此冒充其他节点；在 Puppet Enterprise 环境中，更可进一步获取证书颁发机构的管理权限，并在受管节点上执行远程命令。利用此漏洞需要一张名称发生冲突的证书，该证书需由证书颁发机构通过人工审批或自动签名（autosign）机制签发。

CVSS 9.0 · Critical
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115732

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Certificate Name Authorization Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and, in Puppet Enterprise, access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name, which the certificate authority issues by approval or autosign.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Perforce Puppet Enterprise 2023.8.0 ~ 2023.8.13 -

II. Public POCs for CVE-2026-115732

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115732

请登录查看更多情报信息。

Other References for CVE-2026-115732 (1)

IV. Related Vulnerabilities

Same product: Puppet Enterprise
Same vendor: Perforce
Same weakness: CWE-863