PatchSiren

Perforce Software CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Perforce Software CVE published 2026-09-11

CVE-2026-85979

CVE-2026-85979 is a high-severity command injection vulnerability in Puppet Enterprise. An authenticated user with administrative privileges can inject arbitrary shell commands, potentially leading to full system compromise. The vulnerability allows an attacker to execute arbitrary shell commands with root privileges, which can result in a complete takeover of the affected system. Defenders should priorit [truncated]