CVE-2026-16527 in Red Hat

요약

\~에 의해 MITRE • 2026. 07. 30.

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 책임이 있는: Redhat
• 예약하다: 2026. 07. 22.
• 공개: 2026. 07. 30.
• 모더레이션: 수락
• 항목: VDB-384614
• CPE: 준비됨
• CWE: CWE-284 (확인됨)
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Government, Hostingprovider, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16527
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16527
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16527/