Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how puppet compares to other vendors in security performance

View Risk Score →

Software

puppet enterprise
58
puppet
45
puppet puppet enterprise
31
puppet puppet
15
puppetlabs puppet
6
puppetlabs puppet enterprise
6
puppet server
5
puppet mcollective
4
puppet continuous delivery
3
puppet labs mysql
3
puppet puppetdb
3
puppet cisco ios
2
puppet discovery
2
puppet puppet agent
2
puppet puppet server
2
puppetlabs facter
2
puppetlabs puppet enterprise users
2
puppet bolt
1
puppet connect
1
puppet continuous delivery puppet enterprise
1
puppet device manager
1
puppet facter
1
puppet firewall
1
puppet hiera
1
puppet marionette collective
1
puppet mcollective sshkey security puppet
1
puppet mcollective-puppet-agent puppet
1
puppet pe-razor-server
1
puppet puppet core
1
puppet puppet dashboard
1
puppet puppet enterprise client tools
1
puppet puppet resource_api
1
puppet puppetlabs-apache puppet
1
puppet razor-server
1
puppet remediate
1
puppet stdlib
1

Puppet puppet resource_apiCleartext Storage of Sensitive Information for Puppet Resource API

Risk 25
Severity
6.7
EPSS
0.08%
First published (updated )
CVE-2026-8804

Puppet EnterpriseInsufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

Risk 36
Severity
6.9
First published (updated )
CVE-2025-10360

Puppet Puppet EnterpriseOS Command Injection

Risk 56
Severity
8.8
EPSS
0.05%
First published (updated )
CVE-2025-5459

Puppet Puppet AgentDeserialization of untrusted data

Risk 61
Severity
6.6
First published (updated )
CVE-2021-27017

Puppet Puppet 8End of life details

First published (updated )
latest-version-puppet-8
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet Puppet 8End of life details

First published (updated )
EOL-puppet-8

Puppet CandlepinIn puppet-candlepin shipped with the foreman-installer rpm, when calling /usr/share/candlepin/cpdb w…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2274755

puppet Puppet EnterpriseBroken Session Management in Puppet Enterprise

Risk 61
Severity
9.8
EPSS
0.29%
First published (updated )
CVE-2023-5309

Puppet Bolt- Privilege Escalation in Puppet Bolt

Risk 88
Severity
9.8
First published (updated )
CVE-2023-5214

Puppet Puppet ServerDenial of Service for Revocation of Auto Renewed Certificates

Risk 31
Severity
7.5
EPSS
0.14%
First published (updated )
CVE-2023-5255
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

puppet Puppet EnterpriseA privilege escalation allowing remote code execution was discovered in the orchestration service.

Risk 86
Severity
9.8
First published (updated )
CVE-2023-2530

redhat/puppet-serverA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certifica…

Risk 27
Severity
5.3
First published (updated )
CVE-2023-1894

Puppet puppetlabs-mysqlPuppetlabs-mysql Command Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2022-3276

Fedoraproject FedoraPuppetlabs-apt Command Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2022-3275

Puppet FirewallPuppet Firewall Module May Leave Unmanaged Rules

Risk 86
Severity
9.8
First published (updated )
CVE-2022-0675
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet Puppet AgentA flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credential…

Risk 86
Severity
9.8
First published (updated )
CVE-2021-27023

Puppet Puppet AgentA flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be …

Risk 38
Severity
6.5
First published (updated )
CVE-2021-27025

Puppet PuppetA flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters ma…

Risk 26
Severity
4.4
First published (updated )
CVE-2021-27026

Puppet Continuous DeliveryA flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user wi…

Risk 60
Severity
8.1
First published (updated )
CVE-2021-27024

puppet PuppetA flaw was discovered in bolt-server and ace where running a task with sensitive parameters results …

Risk 30
Severity
4.9
First published (updated )
CVE-2021-27022
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet RemediateThe mechanism which performs certificate validation was discovered to have a flaw that resulted in c…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-27018

Puppet PuppetDBPuppetDB logging included potentially sensitive system information.

Risk 22
Severity
4.3
First published (updated )
CVE-2021-27019

puppet Puppet EnterprisePuppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.

Risk 77
Severity
8.8
First published (updated )
CVE-2021-27020

puppet PuppetSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2021-27021

Puppet Puppet 7Reached end of life

EOL
Apr 30, 2025
First published (updated )
latest-version-puppet-7
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Puppet Puppet 7Reached end of life

EOL
Apr 30, 2025
First published (updated )
EOL-puppet-7

Puppet Continuous DeliveryLocal registry credentials were included directly in the CD4PE deployment definition, which could ex…

Risk 32
Severity
5.5
First published (updated )
CVE-2020-7945

Puppet Puppet EnterprisePuppet Server and PuppetDB provide useful performance and debugging information via their metrics AP…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-1828486

Puppet Continuous Delivery Puppet EnterpriseInfoleak

Risk 44
Severity
7.7
First published (updated )
CVE-2020-7944

puppet Puppet EnterpriseInfoleak

Risk 45
Severity
7.5
First published (updated )
CVE-2020-7943
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203