CVE-2016-5716

8.8 highEPSS 1.8%

High (8.8) in puppet puppet enterprise. EPSS 1.8% chance of exploitation in the next 30 days.

The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2017-08-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

puppet:puppet_enterprise

References

https://puppet.com/security/cve/pe-console-oct-2016
https://puppet.com/security/cve/pe-console-oct-2016

Check your stack JSON