CVE-2026-103507

— UNSCORED

Published 2026-10-05 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.

Weaknesses

CWE-73

All references

https://portal.perforce.com/s/cve/a91Qi000003FE49IAG/arbitrary-filewrite-via-log-configuration-path-in-p4search

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100637PoC
HIGHCVE-2026-100638PoC
UNSCOREDCVE-2026-101126
CRITICALCVE-2026-101148
MEDIUMCVE-2026-102141PoC
MEDIUMCVE-2026-102146PoC
CRITICALCVE-2026-103255PoC
HIGHCVE-2026-103398PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.