CVE-2026-16530Medium· 6.5▾ SunlitA flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in the `pmLogLoadInDom()` function by sending a specially crafted request. This bypasses a critical bounds check, which c…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
pcp (all versions)pcppcppcp (all versions)pcp (all versions)openshift/ose-rhel-coreos-9 (all versions)openshift/ose-rhel-coreos-9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this issue, restrict network access to the pmproxy service on TCP port 44322 using firewall rules. Alternatively, if the pmproxy service is not required, it can be disabled to prevent exploitation.
Example to disable pmproxy:
sudo systemctl stop pmproxy
sudo systemctl disable pmproxy
Note that disabling pmproxy may impact functionality that relies on it. A service reload or restart may be required for changes to take effect.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-16531Medium· 5.3Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet
CVE-2024-45770Medium· 4.4Pcp: pmpost symlink attack allows escalating pcp to root user
CVE-2024-45769Medium· 5.5Pcp: pmcd heap corruption through metric pmstore operations
CVE-2023-6917Medium· 6.0Pcp: unsafe use of directories allows pcp to root privilege escalation
CVE-2022-2127Medium· 5.9Samba: out-of-bounds read in winbind auth_crap
CVE-2026-120830High· 7.4Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure