All vulnerabilities
CVE-2026-103512

P4 (Helix Core): Ticket host-binding bypass via spoofed client IP in P4Search

Perforce P4 (Helix Core)
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.37%Chance of exploitation activity in the next 30 days, higher than 30% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
Published5 Oct 2026Updated 5 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

Description

Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner.

Text from CVE List

Affected versions 2

  • P4 (Helix Core)affected: all versions through 2026.4.1CVE List
  • P4 (Helix Core)unaffected: 2026.4.2CVE List

References 1