AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-16527

Red Hat: remote code execution

Red Hat

CVE-2026-16527 · Published Jul 30, 2026 · updated Nov 4, 2026

High7.3
No fix yet
Red Hat advisory

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306, CWE-284

More Red Hat advisories

All Red Hat
Medium 6.2Jul 30ansible-collection-redhat-leapp: information disclosureCVE-2026-68562no fix yetMedium 5.5Jul 30ansible-collection-redhat-leapp.: insecure permissionsCVE-2026-68563no fix yetMedium 5.3Jul 30Red Hat Samba: out-of-bounds readCVE-2026-58216no fix yetHigh 8.8Jul 30Red Hat Enterprise Linux 10: improper authorizationCVE-2026-58222no fix yetMedium 5.3Jul 30Red Hat Samba: denial of serviceCVE-2026-58218no fix yetHigh 7.6Jul 30Red Hat Cost Management Metrics Operator: server-side request forgeryCVE-2026-18378no fix yet