Unauth RCE via PCP pmproxy /store (CVE-2026-16527)
CVE-2026-16527 Published on July 30, 2026

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-16527 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

LOW

Timeline

2026-07-22

Reported to Red Hat.

2026-07-30

Made public. 8 days later.

Weakness Types

Missing Authentication for Critical Function

The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-16527 has been classified to as an Authorization vulnerability or weakness.

Products Associated with CVE-2026-16527

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Enterprise Linux (RHEL)

Red Hat Openshift

Red Hat Enterprise Linux Eus

Red Hat Rhel Eus

Red Hat Rhel E4s

Red Hat Rhel Tus

Red Hat Rhel Aus

Red Hat Rhel Eus Long Life

Affected Versions

Red Hat Enterprise Linux 10:

Version 0:7.0.3-5.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:6.3.7-1.el10_0.1 and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 0:5.3.7-22.el8_10.5 and below * is unaffected.

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support:

Version 0:5.2.5-8.el8_4.1 and below * is unaffected.

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On:

Version 0:5.2.5-8.el8_4.1 and below * is unaffected.

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support:

Version 0:5.3.5-10.el8_6.1 and below * is unaffected.

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On:

Version 0:5.3.5-10.el8_6.1 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Telecommunications Update Service:

Version 0:5.3.7-19.el8_8.1 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions:

Version 0:5.3.7-19.el8_8.1 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:6.3.7-8.el9_8.4 and below * is unaffected.

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions:

Version 0:6.0.1-8.el9_2.2 and below * is unaffected.

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions:

Version 0:6.2.0-5.el9_4.2 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:6.3.7-1.el9_6.1 and below * is unaffected.

Red Hat Enterprise Linux 6: Red Hat Enterprise Linux 7: Red Hat OpenShift Container Platform 4:

Exploit Probability

EPSS

0.50%

Percentile

40.21%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

Unauth RCE via PCP pmproxy /store (CVE-2026-16527)CVE-2026-16527 Published on July 30, 2026