An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcp-guiUpgrade pcp-testsuiteUpgrade pcp-pmda-bccUpgrade pcp-pmda-systemdUpgrade perl-PCP-MMVUpgrade perl-PCP-LogSummaryUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-zswapUpgrade pcp-pmda-weblogUpgrade pcp-pmda-activemqUpgrade pcp-pmda-sambaUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-slurmUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-mountsUpgrade pcp-pmda-memcacheUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-cifsUpgrade pcp-pmda-smartUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-shpingUpgrade pcp-pmda-rsyslogUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-bind2Upgrade pcp-pmda-ds389logUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-lioUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-traceUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-snmpUpgrade pcp-pmda-summaryUpgrade pcp-pmda-namedUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-pmda-lustreUpgrade pcp-pmda-dockerUpgrade pcp-pmda-netcheckUpgrade pcp-docUpgrade pcp-pmda-nginxUpgrade pcp-pmda-redisUpgrade pcp-export-pcp2zabbixUpgrade pcp-selinuxUpgrade pcp-pmda-denkiUpgrade pcp-pmda-openmetricsUpgrade pcp-confUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-haclusterUpgrade pcpUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-mssqlUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-bpfUpgrade pcp-system-toolsUpgrade pcp-pmda-farmUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-unboundUpgrade pcp-pmda-mailqUpgrade pcp-pmda-podmanUpgrade pcp-geolocateUpgrade pcp-pmda-ciscoUpgrade perl-PCP-PMDAUpgrade pcp-pmda-statsdUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-dmUpgrade pcp-pmda-apacheUpgrade pcp-export-pcp2xmlUpgrade pcp-libs-develUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-bashUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-socketsUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-mongodbUpgrade pcp-pmda-loggerUpgrade pcp-pmda-glusterUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-bpftraceUpgrade perl-PCP-LogImportUpgrade pcp-pmda-jsonUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-ds389Upgrade pcp-pmda-mysqlUpgrade python3-pcpUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-micUpgrade pcp-pmda-uwsgiUpgrade pcp-zeroconfUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-postfixUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-roomtempUpgrade pcp-pmda-newsUpgrade pcp-pmda-gpsdUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-bondingUpgrade pcp-pmda-haproxyUpgrade pcp-develUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-oracleUpgrade pcp-pmda-amdgpuUpgrade pcp-libs | Oct 11, 2026 | Aug 17, 2026 |
| Redhat_linux | — | Upgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-pmda-jsonUpgrade pcp-export-pcp2xmlUpgrade pcp-devel-debuginfoUpgrade pcp-pmda-namedUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-lioUpgrade pcp-pmda-mountsUpgrade pcp-export-pcp2opentelemetryUpgrade pcp-pmda-openvswitchUpgrade perl-PCP-LogImport-debuginfoUpgrade perl-PCP-LogSummaryUpgrade pcp-import-ganglia2pcpUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcp-pmda-hdbUpgrade pcp-export-pcp2influxdbUpgrade python3-pcp-debuginfoUpgrade pcp-testsuiteUpgrade pcp-pmda-systemdUpgrade pcp-pmda-dockerUpgrade pcp-testsuite-debuginfoUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-selinuxUpgrade perl-PCP-MMVUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-zswapUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-sambaUpgrade pcp-pmda-redisUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-traceUpgrade pcp-confNo solution existsUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-weblogUpgrade pcp-pmda-summaryUpgrade pcp-import-mrtg2pcpUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-pmda-opentelemetryUpgrade pcp-pmda-unboundUpgrade pcp-pmda-shpingUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-bccUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-snmpUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-nginxUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-smartUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-slurmUpgrade pcp-debugsourceUpgrade pcp-pmda-dmUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-bpftraceUpgrade pcpUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-oracleUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-pmda-cifsUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-pmda-nfsclientUpgrade pcp-import-benchmarksUpgrade perl-PCP-LogImportUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-geolocateUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-mongodbUpgrade pcp-system-toolsUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-bind2Upgrade pcp-pmda-roomtempUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-logger-debuginfoUpgrade pcp-pmda-farm-debuginfoUpgrade pcp-libs-develUpgrade perl-PCP-PMDAUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-socketsUpgrade pcp-guiUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-statsdUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-import-pmseriesUpgrade pcp-libsUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-bpfUpgrade pcp-develUpgrade pcp-pmda-activemqUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-pmda-smart-debuginfoUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-pmda-newsUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-pmda-bashUpgrade pcp-pmda-haclusterUpgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-loggerUpgrade pcp-pmda-lustreUpgrade pcp-pmda-postfixUpgrade pcp-import-sar2pcpUpgrade pcp-zeroconfUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-pmda-ds389Upgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-mailqUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-bondingUpgrade pcp-pmda-cisco-debuginfoUpgrade python3-pcpUpgrade pcp-gui-debuginfoUpgrade pcp-pmda-denkiUpgrade pcp-pmda-apacheUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-libs-debuginfoUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-netfilterUpgrade pcp-debuginfoUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-farmUpgrade pcp-pmda-gfs2Upgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-glusterUpgrade pcp-docUpgrade pcp-pmda-micUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-rocestatUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-podmanUpgrade pcp-pmda-lmsensors | Jul 31, 2026 | Jul 30, 2026 |
| Rocky_linux | — | Upgrade pcp-pmda-podmanUpgrade pcp-pmda-mssqlUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-pmda-systemd-debuginfoUpgrade python3-pcpUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-farmUpgrade pcp-pmda-micUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-pmda-apacheUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-dbpingUpgrade pcp-import-sar2pcpUpgrade pcp-libsUpgrade pcp-pmda-infinibandUpgrade python3-pcp-debuginfoUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-logger-debuginfoUpgrade pcp-geolocateUpgrade pcp-pmda-statsdUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-farm-debuginfoUpgrade pcp-pmda-bpftraceUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-pmda-socketsUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-libs-develUpgrade pcp-pmda-smart-debuginfoUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-zimbraUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-bashUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-mailqUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-newsUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-lustreUpgrade pcp-zeroconfUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-postfixUpgrade pcp-libs-debuginfoUpgrade perl-PCP-PMDAUpgrade pcp-pmda-glusterUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-bpfUpgrade pcp-pmda-cisco-debuginfoUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-ds389Upgrade pcp-pmda-gpsdUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-unboundUpgrade pcp-pmda-cifsUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-pmda-netfilterUpgrade pcp-develUpgrade pcp-pmda-loggerUpgrade pcp-pmda-bondingUpgrade pcp-export-pcp2zabbixUpgrade perl-PCP-LogImportUpgrade pcp-system-toolsUpgrade pcp-pmda-mountsUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-pmda-dockerUpgrade pcp-pmda-bccUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-sambaUpgrade pcp-pmda-resctrlUpgrade pcp-devel-debuginfoUpgrade pcp-testsuite-debuginfoUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-pmda-nginxUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-weblogUpgrade pcp-pmda-namedUpgrade pcp-export-zabbix-agent-debuginfoUpgrade perl-PCP-MMVUpgrade pcp-pmda-slurmUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-bash-debuginfoUpgrade perl-PCP-MMV-debuginfoUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-dmUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-pmda-oracleUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-denkiUpgrade pcp-pmda-bind2Upgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-debugsourceUpgrade pcp-pmda-netcheckUpgrade pcp-confUpgrade pcp-selinuxUpgrade pcp-pmda-summaryUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-pmda-snmpUpgrade pcp-pmda-smartUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-export-pcp2jsonUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-redisUpgrade pcp-pmda-lioUpgrade pcp-pmda-activemqUpgrade pcp-testsuiteUpgrade pcp-pmda-traceUpgrade pcp-pmda-shpingUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-jsonUpgrade pcp-pmda-lustrecommUpgrade pcp-import-mrtg2pcpUpgrade pcp-gui-debuginfoUpgrade pcp-export-pcp2openmetricsUpgrade pcp-export-pcp2graphiteUpgrade pcp-debuginfoUpgrade pcpUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-pmda-zswapUpgrade pcp-pmda-systemdUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-guiUpgrade pcp-pmda-mongodb | Aug 20, 2026 | Aug 18, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub