AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2016-2786

CRITICAL · CVSS 9.8 EPSS 1.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-06-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2016-2786
Severity
CRITICAL
CVSS
9.8
EPSS
1.56%

Original Filing — NVD Description

The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote attackers to spoof brokers and execute arbitrary commands via a crafted certificate.