Vendor

Perforce

2 briefs RSS

Perforce Puppet Server: Authorization bypass in trapperkeeper-authorization (CVE-2026-115732)

An authorization bypass vulnerability in the trapperkeeper-authorization component of Puppet Server allows node impersonation and remote command execution via specifically crafted CA-signed certificates. A public exploit is available.

Puppet Server +1

1c 22h ago

high advisory

Puppet: Deserialization of untrusted data in report-processing (CVE-2026-115731)

2 CVEs

A deserialization vulnerability in Puppet report-processing allows arbitrary code execution via crafted PUT requests.

2c updated 11h ago