AZL-94377
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94377.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-94377
- Upstream
- CVE-2026-16524
- Published
- 2026-07-30T06:25:02Z
- Modified
- 2026-09-23T05:34:42Z
- Summary
- CVE-2026-16524 affecting package pcp 6.3.2-1
- Details
-
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
- References