CVE-2026-16527CWE-284CWE-306broken-access-control

CVE-2026-16527

High · published July 30, 2026

CVSS v3.1
7.3
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00591 · 47.5th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-306 · Missing Authentication for Critical Function
Published
2026-07-30T10:25Z
References (12)
https://access.redhat.com/errata/RHSA-2026:55560 · [email protected]https://access.redhat.com/errata/RHSA-2026:55617 · [email protected]https://access.redhat.com/errata/RHSA-2026:55740 · [email protected]https://access.redhat.com/errata/RHSA-2026:72272 · [email protected]https://access.redhat.com/errata/RHSA-2026:72273 · [email protected]https://access.redhat.com/errata/RHSA-2026:72593 · [email protected]https://access.redhat.com/errata/RHSA-2026:72594 · [email protected]https://access.redhat.com/errata/RHSA-2026:73767 · [email protected]https://access.redhat.com/errata/RHSA-2026:74612 · [email protected]https://access.redhat.com/errata/RHSA-2026:74613 · [email protected]https://access.redhat.com/security/cve/CVE-2026-16527 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2506031 · [email protected]
EPSS history
Timeline
  • 30 JUL 05:30Z
    Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
    cvelistv5