CVE-2026-115732: Perforce Puppet Enterprise: Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in…

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables...