CVE-2026-16524

HIGH

A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 7/30/2026Modified: 7/30/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-16524 — A command injection flaw in PCP's linux_sockets PMDA allows malicious shell meta...

A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

CVE-2026-16524
NIST NVD

References (2)

https://access.redhat.com/security/cve/CVE-2026-16524https://bugzilla.redhat.com/show_bug.cgi?id=2506023