CVE-2026-100102
RCE via exposed JDWP debug agent in P4Search
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.
| CWE | CWE-489 |
| Vendor | perforce |
| Product | p4 (helix core) |
| Published | Oct 5, 2026 |
| Last Updated | Oct 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for perforce p4 (helix core)
Be the first to know when new unknown vulnerabilities affecting perforce p4 (helix core) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Perforce / P4 (Helix Core)
0 ≤ 2026.4.1