CVE-2026-16527 — Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metr…
Published: 2026-07-30 · CVSS: 7.3 · CVSS 3.1
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7