CybersecurityVERIFIED NOV 2026
Critical Puppet Server flaw puts CA and managed estate at risk
Red Hat has rated CVE-2026-115731 Critical: a CA-signed Puppet agent certificate can be used to execute code on a Puppet Server. Weak autosigning may give an unauthenticated network attacker that prerequisite, putting the central CA and downstream managed systems in scope.