High severity7.3NVD Advisory· Published Jul 30, 2026· Updated Aug 21, 2026
CVE-2026-16527
CVE-2026-16527
Description
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
116- osv-coords115 versionspkg:rpm/almalinux/pcp-export-zabbix-agentpkg:rpm/almalinux/pcp-export-pcp2openmetricspkg:rpm/almalinux/pcp-pmda-bpfpkg:rpm/almalinux/pcp-pmda-nginxpkg:rpm/almalinux/pcp-pmda-oraclepkg:rpm/almalinux/python3-pcppkg:rpm/almalinux/pcp-pmda-infinibandpkg:rpm/almalinux/pcp-pmda-gpsdpkg:rpm/almalinux/pcp-pmda-hdbpkg:rpm/opensuse/pcp&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/pcp-export-pcp2opentelemetrypkg:rpm/almalinux/pcp-pmda-loggerpkg:rpm/almalinux/pcp-pmda-bondingpkg:rpm/almalinux/pcp-pmda-bpftracepkg:rpm/almalinux/pcp-pmda-podmanpkg:rpm/almalinux/pcp-pmda-nvidia-gpupkg:rpm/almalinux/pcp-pmda-bccpkg:rpm/almalinux/perl-PCP-PMDApkg:rpm/almalinux/pcp-pmda-lustrecommpkg:rpm/almalinux/pcp-pmda-pdnspkg:rpm/almalinux/pcp-pmda-amdgpupkg:rpm/almalinux/pcp-pmda-ds389pkg:rpm/almalinux/pcp-pmda-glusterpkg:rpm/almalinux/pcp-pmda-namedpkg:rpm/almalinux/pcp-pmda-postgresqlpkg:rpm/almalinux/pcp-pmda-snmppkg:rpm/almalinux/pcp-pmda-mssqlpkg:rpm/almalinux/pcp-pmda-micpkg:rpm/almalinux/pcp-libs-develpkg:rpm/almalinux/pcp-pmda-smartpkg:rpm/almalinux/pcp-pmda-denkipkg:rpm/almalinux/pcp-pmda-weblogpkg:rpm/almalinux/pcppkg:rpm/almalinux/pcp-export-pcp2elasticsearchpkg:rpm/almalinux/pcp-export-pcp2graphitepkg:rpm/almalinux/pcp-develpkg:rpm/almalinux/pcp-export-pcp2zabbixpkg:rpm/almalinux/pcp-guipkg:rpm/almalinux/pcp-libspkg:rpm/almalinux/pcp-pmda-ciscopkg:rpm/almalinux/pcp-pmda-liopkg:rpm/almalinux/pcp-pmda-lmsensorspkg:rpm/almalinux/pcp-pmda-lustrepkg:rpm/almalinux/pcp-pmda-netcheckpkg:rpm/almalinux/pcp-pmda-newspkg:rpm/almalinux/pcp-pmda-statsdpkg:rpm/almalinux/pcp-zeroconfpkg:rpm/almalinux/perl-PCP-LogSummarypkg:rpm/almalinux/pcp-import-pmseriespkg:rpm/almalinux/pcp-pmda-bind2pkg:rpm/almalinux/pcp-pmda-perfeventpkg:rpm/almalinux/pcp-pmda-rocestatpkg:rpm/almalinux/pcp-pmda-dockerpkg:rpm/almalinux/pcp-pmda-zimbrapkg:rpm/almalinux/pcp-import-iostat2pcppkg:rpm/almalinux/pcp-import-sar2pcppkg:rpm/almalinux/pcp-pmda-mysqlpkg:rpm/almalinux/pcp-pmda-netfilterpkg:rpm/almalinux/pcp-pmda-nfsclientpkg:rpm/almalinux/pcp-pmda-socketspkg:rpm/almalinux/pcp-pmda-systemdpkg:rpm/almalinux/pcp-pmda-tracepkg:rpm/almalinux/pcp-system-toolspkg:rpm/almalinux/perl-PCP-LogImportpkg:rpm/almalinux/pcp-export-pcp2sparkpkg:rpm/almalinux/pcp-export-pcp2xmlpkg:rpm/almalinux/pcp-pmda-activemqpkg:rpm/almalinux/pcp-pmda-apachepkg:rpm/almalinux/pcp-pmda-bashpkg:rpm/almalinux/pcp-pmda-haclusterpkg:rpm/almalinux/pcp-pmda-haproxypkg:rpm/almalinux/pcp-pmda-libvirtpkg:rpm/almalinux/pcp-pmda-mailqpkg:rpm/almalinux/pcp-pmda-sambapkg:rpm/almalinux/pcp-import-benchmarkspkg:rpm/almalinux/pcp-pmda-mongodbpkg:rpm/almalinux/pcp-pmda-mountspkg:rpm/almalinux/pcp-pmda-opentelemetrypkg:rpm/almalinux/pcp-selinuxpkg:rpm/opensuse/pcp&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/pcp-pmda-unboundpkg:rpm/almalinux/pcp-export-pcp2jsonpkg:rpm/almalinux/pcp-pmda-elasticsearchpkg:rpm/almalinux/pcp-pmda-roomtemppkg:rpm/almalinux/pcp-pmda-shpingpkg:rpm/almalinux/pcp-pmda-summarypkg:rpm/almalinux/pcp-pmda-slurmpkg:rpm/almalinux/pcp-pmda-cifspkg:rpm/almalinux/pcp-confpkg:rpm/almalinux/pcp-pmda-gfs2pkg:rpm/almalinux/pcp-pmda-rabbitmqpkg:rpm/almalinux/pcp-pmda-sendmailpkg:rpm/almalinux/pcp-pmda-farmpkg:rpm/almalinux/pcp-pmda-resctrlpkg:rpm/almalinux/pcp-pmda-rsyslogpkg:rpm/almalinux/pcp-export-pcp2influxdbpkg:rpm/almalinux/pcp-pmda-dmpkg:rpm/almalinux/pcp-pmda-gpfspkg:rpm/almalinux/pcp-pmda-openvswitchpkg:rpm/almalinux/pcp-pmda-postfixpkg:rpm/almalinux/pcp-testsuitepkg:rpm/almalinux/pcp-import-ganglia2pcppkg:rpm/almalinux/pcp-pmda-openmetricspkg:rpm/almalinux/pcp-pmda-redispkg:rpm/almalinux/pcp-import-collectl2pcppkg:rpm/almalinux/pcp-pmda-dbpingpkg:rpm/almalinux/pcp-pmda-ds389logpkg:rpm/almalinux/pcp-pmda-jsonpkg:rpm/almalinux/pcp-pmda-memcachepkg:rpm/almalinux/pcp-geolocatepkg:rpm/almalinux/pcp-pmda-zswappkg:rpm/almalinux/pcp-docpkg:rpm/almalinux/perl-PCP-MMVpkg:rpm/almalinux/pcp-import-mrtg2pcppkg:rpm/almalinux/pcp-pmda-uwsgi
< 5.3.7-22.el8_10.5+ 114 more
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 6.3.8-3.1
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 6.2.0-160000.4.1
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 5.3.7-22.el8_10.5
- (no CPE)range: < 7.0.3-5.el10_2
- (no CPE)range: < 7.0.3-5.el10_2
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.