CVE-2026-103509

UNKNOWN 0.0

Credential Disclosure in P4 Search Configuration API

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3.

CWE	CWE-1220
Vendor	perforce
Product	p4 (helix core)
Published	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for perforce p4 (helix core)

Be the first to know when new unknown vulnerabilities affecting perforce p4 (helix core) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Perforce / P4 (Helix core)

0 ≤ 2026.4.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

portal.perforce.com: https://portal.perforce.com/s/cve/a91Qi000003Gdi1IAC/credential-disclosure-in-p4-search-configuration-api