Snapshot 251913
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Perforce Software Welcome to Perforce Software's Trust Center. We deliver leading-edge products that span the demands of the DevOps lifecycle and bring the most imaginative solutions to life more quickly and securely, with business-changing outcomes. Privacy PolicyOpens in new tab Filter by For more information about Perforce and our DevOps Products, please see the following resources: Perforce DevOps Product SuiteOpens in new tab Perforce Security & ComplianceOpens in new tab Compliance SOC 2 ISO 27001:2022 ISO/IEC 42001:2023 ISO 9001:2015 GDPR CCPA HIPAA Resources View all Perforce Software Certificate of Insurance Information Security Supplemental Terms Opens in new tab ISO 42001 ISO 42001 Certificate BlazeMeter SOC 2 Type 2 Report Penetration Test Executive Summary Delphix SOC 2 Type 2 Report ISO 27001 Certificate HIPAA Attestation Report Gliffy SOC 2 Type 2 Report Penetration Test Executive Summary Gliffy Architecture Diagrams Gliffy Data Encryption at Rest View 4 more Perfecto SOC 2 Type 2 Report Penetration Test Executive Summary Perfecto Security Overview Puppet Puppet Enterprise - Pen Test Executive Attestation Puppet Cloud - Pen Test Executive Attestation QAC / Klocwork ISO 27001 Certificate ISO 9001 Certificate Subprocessors View all Amazon Web Services (AWS) • Cloud Provider Multiple Gliffy, Perfecto Google Cloud • Cloud Provider Multiple BlazeMeter Microsoft Azure • Cloud Provider Multiple Delphix (SaaS) OpenAI • Gliffy Diagram Generation United States Gliffy FAQ View all Updates View all Security Critical Vulnerabilities Affecting Puppet Published November 3, 2026 Perforce has released security updates for two critical vulnerabilities affecting Puppet Enterprise, Puppet Enterprise Advanced, and Puppet Core: CVE-2026-115731: Report Deserialization Code Execution, CVSS 9.4 CVE-2026-115732: Certificate Name Authorization Bypass, CVSS 9.0 At this time, Perforce is not aware of active exploitation and has no evidence that customer data has been accessed as a result of these vulnerabilities. Customer action: Customers should upgrade to the latest applicable security release and then restart the server as soon as possible. Fixed versions are Puppet Enterprise/Advanced 2026.0.1, 2025.12.1, or 2023.8.13, and Puppet Core 9.1.3 or 8.22.2. Customers unable to upgrade immediately should review their autosign configuration and authorization rules as a temporary mitigation. For additional information, visit the Perforce CVE DashboardOpens in new tab, Puppet releasesOpens in new tab, or contact Perforce SupportOpens in new tab. Security Security Update: Recently Disclosed External Vulnerabilities Published October 30, 2026 Perforce is actively monitoring and assessing recently disclosed critical vulnerabilities affecting widely used third-party technologies. We continue to monitor PHP2Shell (CVE-2026-109618Opens in new tab and CVE-2026-109619Opens in new tab) and are assessing: Brotli: CVE-2026-111497Opens in new tab Linux Kernel: CVE-2026-98432Opens in new tab Our Security, Engineering, IT, and Product teams are evaluating Perforce-managed environments and products for potential exposure and taking appropriate remediation actions where applicable. Where we determine that a vulnerability affects a Perforce product or requires customer action, we will provide product-specific guidance, remediation information, and updates through the Perforce Trust Center and Support channels. We will continue to monitor these vulnerabilities and update this notice as our assessments progress. For questions related to a specific Perforce product, customers may contact Perforce SupportOpens in new tab. Security PHP Vulnerabilities Impacting Select Perforce Products Published October 23, 2026 Security Advisory: Perforce continues to assess and respond to recently disclosed PHP vulnerabilities (CVE-2026-109618 / CVE-2026-109619). We have found no evidence that the vulnerabilities have been exploited in any Perforce products or our environment, and we have found no evidence of unauthorized access or exposure of customer data. To date, we have identified the following products and services as potentially impacted and have notified those customers. Perforce has taken action for Perforce-managed services and has provided remediation guidance for customer-managed products, as outlined below. Customer Action Required: The following products may require customers to update affected PHP installations. Product-specific remediation guidance is available through Perforce Support:Opens in new tab ZendOpens in new tab P4 Code Review (Helix Swarm)Opens in new tab BlazeMeter (Perforce has applied the necessary server-side updates. No action is required by BlazeMeter customers.) Perforce has also reviewed and continues to monitor our internal IT systems, cloud services, and internet-facing websites. We are applying updates where appropriate and have not identified evidence of exploitation within Perforce-managed environments related to these vulnerabilities at this time. We will continue to monitor the situation, evaluate newly released information, and provide updates through the Trust Center as necessary. Last Updated: October 23, 2026 Customers requiring assistance should contact Perforce Support. Security Monitoring Recently Disclosed PHP Vulnerabilities Published October 22, 2026 Security Advisory: Perforce is actively evaluating recently disclosed PHP vulnerabilities for potential impact to our products and services. Our teams are conducting a comprehensive assessment and working with relevant product teams. We will provide updates through the Trust Center as additional information becomes available and will contact affected customers directly if action is required.