AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-16524

Red Hat: command injection

Red Hat

CVE-2026-16524 · Published Jul 30, 2026 · updated Nov 4, 2026

High7.8
No fix yet
Red Hat advisory

A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric.

This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Red Hat advisories

All Red Hat
Medium 6.2Jul 30ansible-collection-redhat-leapp: information disclosureCVE-2026-68562no fix yetMedium 5.5Jul 30ansible-collection-redhat-leapp.: insecure permissionsCVE-2026-68563no fix yetMedium 5.3Jul 30Red Hat Samba: out-of-bounds readCVE-2026-58216no fix yetHigh 8.8Jul 30Red Hat Enterprise Linux 10: improper authorizationCVE-2026-58222no fix yetMedium 5.3Jul 30Red Hat Samba: denial of serviceCVE-2026-58218no fix yetHigh 7.6Jul 30Red Hat Cost Management Metrics Operator: server-side request forgeryCVE-2026-18378no fix yet