CRITICAL 9.5 NVD

CVE-2026-100102

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can exec

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.

References

https://portal.perforce.com/s/cve/a91Qi000003FE7NIAW/rce-via-exposed-jdwp-debug-agent-in-p

Published: 2026-10-05 · Source: NVD · Feed updated: 2026-10-05

This critical severity vulnerability with a CVSS score of 9.5 was published on 2026-10-05 via NVD.

Risk Timeline

CVE Disclosed2026-10-05 · -1 days ago

Remediation Resources

Official Advisory

portal.perforce.com/s/cve/a91Qi000003FE7NIAW/rce-via-exposed-jdwp-debu

vulnfeed aggregates 7640 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.