Puppet Server RCE CVE-2026-115731 (CVSS 9.4) now has a public proof-of-concept exploit. Update OpenVox and Puppet Enterprise to patched versions. Related Posts: Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug SnappyMail Remote Code Execution Chain Disclosed With Public PoC Exploit Code Airbyte Vulnerability Exploited in the Wild Lets Attackers Run Code in Connector Builder The post PoC Exploit and Technical Details Published for Puppet Server