All 9 CVE vulnerabilities found in P4 (Helix Core), with AI-generated Chinese analysis, references, and POCs.
Vendor: Perforce
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-103509 | Credential Disclosure in P4 Search Configuration API CWE-1220 | 8.5 | High | 2026-10-15 |
| CVE-2026-103508 | Path traversal via logging configuration in P4Search CWE-23 | 7.3 | High | 2026-10-15 |
| CVE-2026-103510 | Authentication bypass via blank auth token in P4Search CWE-636 | 9.5 | Critical | 2026-10-05 |
| CVE-2026-103511 | Arbitrary file-write via extension installation in P4Search CWE-73 | 5.1 | Medium | 2026-10-05 |
| CVE-2026-103512 | Ticket host-binding bypass via spoofed client IP in P4Search CWE-290 | 5.3 | Medium | 2026-10-05 |
| CVE-2026-103507 | Arbitrary file-write via log configuration path in P4Search CWE-73 | 7.5 | High | 2026-10-05 |
| CVE-2026-100102 | RCE via exposed JDWP debug agent in P4Search CWE-489 | 9.5 | Critical | 2026-10-05 |
| CVE-2026-100103 | Authentication bypass via default auth token in P4Search CWE-1392 | 10.0 | Critical | 2026-10-05 |
| CVE-2026-6902 | Code Injection in Perforce P4 (Helix Core) CWE-94 | - | - | 2026-05-18 |
All 9 known CVE vulnerabilities affecting P4 (Helix Core) with full Chinese analysis, references, and POCs where available.