PT-2026-66362 · Red Hat · Red Hat Enterprise Linux 10+5

CVE-2026-16524 · Published 2026-07-30 · Updated 2026-07-30

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A command injection flaw in PCP's linux sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-16524

Affected Products

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-16524 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2506023 · Note
• https://access.redhat.com/security/cve/CVE-2026-16524 · Note