Critical 9.4
CVE-2026-115731
Public PoC Exploit Released for Puppet Server RCE Vulnerability CVE-2026-115731
Vendor / product: Perforce Puppet Enterprise
Event date: 2026-11-03
Public PoC: Yes
First tracked by RiskWire: 2026-11-04
Sources & citations (3)
- PoC Exploit and Technical Details Published for Puppet Server RCE Flaw CVE-2026-115731 (CVSS 9.4) securityonline.info · 2026-11-04
- OpenVox Server RCE and client impersonation vulnerabilities seclists.org · 2026-11-03
- Critical Puppet and OpenVox Flaws Expose Servers to Code Execution and Client Impersonation mallory.ai · 2026-11-04
References
See CVE-2026-115731 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →