CVE-2026-85979 | Perforce Puppet Enterprise up to 2023.8.10/2025.11.2 java_keystore_passwd command injection

A vulnerability labeled as very critical has been found in Perforce Puppet Enterprise up to 2023.8.10/2025.11.2. Impacted is an unknown function. Such manipulation of the argument java_keystore_passwd leads to command injection.

This vulnerability is referenced as CVE-2026-85979. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More