SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2016-2786

CRITICAL · CVSS 9.8 EPSS 1.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-06-10 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2016-2786
Severity
CRITICAL
CVSS
9.8
EPSS
1.56%

Original NVD Description

The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote attackers to spoof brokers and execute arbitrary commands via a crafted certificate.