PT-2026-66363 · Red Hat · Red Hat Enterprise Linux 10+5

CVE-2026-16526 · Published 2026-07-30 · Updated 2026-07-30

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A flaw in the PCP linux sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.

Fix

Weakness Enumeration

CWE-403

Related Identifiers

CVE-2026-16526

Affected Products

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-16526 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-16526 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2506026 · Note