https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 01:17:34 +0000 https://vulnerability.circl.lu/vuln/cve-2026-85979 <p><strong>Affected:</strong> Perforce Software Puppet Enterprise</p> <p>Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without sufficient sanitization. Because the resulting commands are executed with root privileges, successful exploitation can lead to full compromise of the affected system.</p> <p>It affects Puppet Enterprise 2023.8.0 through 2023.8.10 and Puppet Enterprise 2025.0.0 through 2025.11.2.</p> <p>This has been resolved in Puppet Enterprise 2023.8.11 and Puppet Enterprise 2025.11.3.</p> <p><strong>Affected:</strong> Perforce Software Puppet Enterprise</p> <p>Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a shell execution context without sufficient sanitization. Because the resulting commands are executed with root privileges, successful exploitation can lead to full compromise of the affected system.</p> <p>It affects Puppet Enterprise 2023.8.0 through 2023.8.10 and Puppet Enterprise 2025.0.0 through 2025.11.2.</p> <p>This has been resolved in Puppet Enterprise 2023.8.11 and Puppet Enterprise 2025.11.3.</p> https://vulnerability.circl.lu/vuln/cve-2026-85979