← CVE Intelligence

CVE-2026-16527

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules PUBLISHED

Description (CNA)

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:7.0.3-5.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:6.3.7-1.el10_0.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:5.3.7-22.el8_10.5 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:5.2.5-8.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:5.2.5-8.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:5.3.5-10.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onunaffected 0:5.3.5-10.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:5.3.7-19.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:5.3.7-19.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:6.3.7-8.el9_8.4 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:6.0.1-8.el9_2.2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:6.2.0-5.el9_4.2 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:6.3.7-1.el9_6.1 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.