CVE-2026-16524 in Red Hat

Riassunto

di MITRE • 30/07/2026

A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Redhat
• Prenotare: 22/07/2026
• Divulgazione: 30/07/2026
• Moderazione: accettato
• Voce: VDB-384490
• CPE: pronto
• CWE: CWE-77 (confermato)
• CVSS: 9.9 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Energy, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16524
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16524
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16524/