CVE-2026-16524
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
Jul 30, 2026
Vendor
unknown
Description
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.