PT-2026-66362 · Red Hat · Red Hat Enterprise Linux 10+5

CVE-2026-16524 · Publicado 2026-07-30 · Atualizado 2026-07-30

Mitre

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A command injection flaw in PCP's linux sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-16524

Produtos afetados

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

Referências · 3

• https://bugzilla.redhat.com/show_bug.cgi?id=2506023 · Nota
• https://access.redhat.com/security/cve/CVE-2026-16524 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16524 · Nota de Segurança