An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade pcp-export-pcp2xmlUpgrade pcp-pmda-slurmUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-opentelemetryUpgrade pcp-pmda-netcheckUpgrade python3-pcp-debuginfoUpgrade pcp-pmda-summaryUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-nvidia-gpuUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-hdbUpgrade pcp-pmda-mountsUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-snmpUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-zswapUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-export-pcp2opentelemetryUpgrade pcp-pmda-redisUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-sambaUpgrade pcp-pmda-amdgpu-debuginfoUpgrade perl-PCP-MMVUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-confUpgrade pcp-pmda-lioUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-devel-debuginfoUpgrade pcp-import-ganglia2pcpUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-smartUpgrade pcp-pmda-traceUpgrade pcp-selinuxUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-testsuite-debuginfoUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-unboundUpgrade pcp-pmda-resctrlUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-testsuiteUpgrade pcpUpgrade pcp-pmda-cifsUpgrade pcp-pmda-dockerUpgrade pcp-pmda-bccUpgrade pcp-export-pcp2openmetricsNo solution existsUpgrade pcp-pmda-systemdUpgrade pcp-debugsourceUpgrade pcp-pmda-dmUpgrade pcp-pmda-shpingUpgrade pcp-pmda-bpftraceUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-nginxUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-weblogUpgrade pcp-pmda-oracleUpgrade pcp-pmda-jsonUpgrade pcp-pmda-namedUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcp-export-pcp2influxdbUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-smart-debuginfoUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-podmanUpgrade pcp-pmda-glusterUpgrade pcp-pmda-bashUpgrade pcp-import-collectl2pcpUpgrade pcp-export-pcp2elasticsearchUpgrade python3-pcpUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-farm-debuginfoUpgrade pcp-pmda-denkiUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-pmda-loggerUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-perfeventUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-rocestatUpgrade pcp-pmda-logger-debuginfoUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-ds389Upgrade pcp-pmda-ciscoUpgrade pcp-libs-develUpgrade pcp-import-pmseriesUpgrade perl-PCP-PMDAUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-lustreUpgrade pcp-pmda-farmUpgrade pcp-pmda-cisco-debuginfoUpgrade pcp-guiUpgrade pcp-pmda-mailqUpgrade pcp-pmda-activemqUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-pmda-elasticsearchUpgrade pcp-develUpgrade pcp-pmda-bpfUpgrade pcp-pmda-micUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-geolocateUpgrade perl-PCP-LogImportUpgrade pcp-system-toolsUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-mongodbUpgrade pcp-import-benchmarksUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-sendmailUpgrade pcp-libsUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-bind2Upgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-statsdUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-pmda-postfixUpgrade pcp-pmda-socketsUpgrade pcp-pmda-gpfsUpgrade pcp-import-sar2pcpUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-zimbraUpgrade pcp-zeroconfUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-pmda-gfs2Upgrade pcp-docUpgrade pcp-gui-debuginfoUpgrade pcp-debuginfoUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-apacheUpgrade pcp-pmda-newsUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-bondingUpgrade pcp-libs-debuginfo | Jul 31, 2026 | Jul 30, 2026 |
| Rocky_linux | — | Upgrade pcp-debuginfoUpgrade pcp-export-pcp2graphiteUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-systemdUpgrade pcp-pmda-zswapUpgrade pcp-gui-debuginfoUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-jsonUpgrade pcp-selinuxUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-redisUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-snmpUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-pmda-smartUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-activemqUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-summaryUpgrade pcp-confUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-pmda-lmsensorsUpgrade pcpUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-bccUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-lioUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-dockerUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-devel-debuginfoUpgrade pcp-pmda-mountsUpgrade pcp-guiUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-pmda-ds389logUpgrade pcp-testsuite-debuginfoUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-sambaUpgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-denkiUpgrade pcp-pmda-dmUpgrade pcp-pmda-bind2Upgrade pcp-pmda-netcheckUpgrade pcp-pmda-openmetricsUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-oracleUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-pmda-nginxUpgrade perl-PCP-MMVUpgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-slurmUpgrade pcp-debugsourceUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-pmda-traceUpgrade pcp-testsuiteUpgrade pcp-pmda-shpingUpgrade pcp-pmda-weblogUpgrade pcp-export-pcp2influxdbUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcp-pmda-namedUpgrade pcp-pmda-netfilterUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-bashUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-export-pcp2zabbixUpgrade pcp-develUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-pmda-bondingUpgrade pcp-libs-debuginfoUpgrade pcp-pmda-elasticsearchUpgrade perl-PCP-LogImportUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-podmanUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-pmda-bpftraceUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-zeroconfUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-socketsUpgrade pcp-pmda-logger-debuginfoUpgrade perl-PCP-PMDAUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-mongodbUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-libs-develUpgrade python3-pcp-debuginfoUpgrade pcp-pmda-newsUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-micUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-apacheUpgrade pcp-libsUpgrade pcp-import-sar2pcpUpgrade pcp-geolocateUpgrade pcp-pmda-statsdUpgrade pcp-system-toolsUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-unboundUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-cifsUpgrade pcp-pmda-perfevent-debuginfoUpgrade python3-pcpUpgrade pcp-pmda-farmUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-lustreUpgrade pcp-pmda-loggerUpgrade pcp-pmda-farm-debuginfoUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-smart-debuginfoUpgrade pcp-pmda-postfixUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-mailqUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-glusterUpgrade pcp-pmda-gfs2Upgrade pcp-import-collectl2pcpUpgrade pcp-pmda-cisco-debuginfoUpgrade pcp-pmda-bpfUpgrade pcp-pmda-ds389Upgrade pcp-export-zabbix-agentUpgrade pcp-pmda-zimbra | Aug 20, 2026 | Aug 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub