OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-100103

CRITICAL · CVSS 10 EPSS 0.42% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-05 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

Perforce P4 Search container images prior to version 2026.4.2 are vulnerable due to the service authentication token being reset to a default value, allowing unauthenticated attackers with network access to gain the highest application privileges. This critical vulnerability could lead to arbitrary code execution and complete compromise of the connected P4 Server. Organizations using affected versions should prioritize immediate updates to mitigate this severe risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-100103
Severity
CRITICAL
CVSS
10
EPSS
0.42%

Original NVD Description

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the connected P4 Server.