Security Advisory

CVE-2026-16524

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 05:15:15

Last updated 2026-07-30 15:17:34

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

← Browse all CVEs View on cve.org ↗