A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1724:03 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)
      * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)
      * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)
      * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0266 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-16524:
    A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the     network.persocket.filter metric.
    This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

    CVE-2026-16526:
    A flaw in the PCP linux_sockets module exposes an unsecured internal connection.
    An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary     commands as root.

    CVE-2026-16527:
    An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP     pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code     execution and system takeover.

    CVE-2026-16529:
    A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets     during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a     total denial of service (DoS) for subsequent packet reads.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21636-1 advisory.

    - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922).
    - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer     credentials       (bsc#1272923).
    - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
    - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925).
    - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
    - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
    - command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928).
    - command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104831 advisory.

    A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets     during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a     total denial of service (DoS) for subsequent packet reads.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1662:02 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)
      * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)
      * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)
      * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55740 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)
      * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)
      * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)
      * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55740 advisory.

    - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668)
    - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527,       RHEL-213712)
    - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55617 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)
      * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)
      * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)
      * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55560 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)
      * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)
      * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)
      * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55560 advisory.

    - Fix CVE-2026-16524: command injection in linux_sockets PMDA (RHEL-213662)
    - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213686)
    - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55617 advisory.

    - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746)
    - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756)
    - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659)
    - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695)
    - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55617 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)

    * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)

    * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)

    * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of pcp installed on the remote host is prior to 4.3.2-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3857 advisory.

    A flaw in the PCP linux_sockets module exposes an unsecured internal connection.An attacker with initial     code execution can exploit this to escalate privileges and execute arbitrary commands as root.
    (CVE-2026-16526)

    A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets     during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a     total denial of service (DoS) for subsequent packet reads. (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55740 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)

    * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)

    * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)

    * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55560 advisory.

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)

    * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)

    * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)

    * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55740 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)

    * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)

    * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)

    * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55617 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)

    * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)

    * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)

    * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55560 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524)

    * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526)

    * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules     (CVE-2026-16527)

    * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3505-1 advisory.

    - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922).
    - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer     credentials       (bsc#1272923).
    - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
    - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925).
    - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
    - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
    - Command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928).
    - Command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3508-1 advisory.

    - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922).
    - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer     credentials       (bsc#1272923).
    - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
    - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925).
    - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
    - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
    - command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928).
    - command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3507-1 advisory.

    - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922).
    - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer     credentials       (bsc#1272923).
    - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
    - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925).
    - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
    - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
    - command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928).
    - command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3506-1 advisory.

    - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922).
    - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer     credentials       (bsc#1272923).
    - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
    - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925).
    - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
    - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
    - command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928).
    - command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets     during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a     total denial of service (DoS) for subsequent packet reads. (CVE-2026-16529)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
342172	MiracleLinux 8 : pcp-5.3.7-22.el8_10.5 (AXSA:2026-1724:03)	Nessus	Miracle Linux Local Security Checks	Local	high
342079	Alibaba Cloud Linux 3 : 0266: pcp (ALINUX3-SA-2026:0266)	Nessus	Alibaba Cloud Linux Local Security Checks	Local	high
341181	openSUSE 16: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (openSUSE-SU-2026:21636-1)	Nessus	SuSE Local Security Checks	Local	high
340906	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcp (UTSA-2026-104831)	Nessus	Unity Linux Local Security Checks	Local	high
339927	MiracleLinux 9 : pcp-6.3.7-8.el9_8.4 (AXSA:2026-1662:02)	Nessus	Miracle Linux Local Security Checks	Local	high
338323	AlmaLinux 9 : pcp (ALSA-2026:55740)	Nessus	Alma Linux Local Security Checks	Local	high
338178	Oracle Linux 9 : pcp (ELSA-2026-55740)	Nessus	Oracle Linux Local Security Checks	Local	high
338131	AlmaLinux 10 : pcp (ALSA-2026:55617)	Nessus	Alma Linux Local Security Checks	Local	high
338067	AlmaLinux 8 : pcp (ALSA-2026:55560)	Nessus	Alma Linux Local Security Checks	Local	high
337883	Oracle Linux 8 : pcp (ELSA-2026-55560)	Nessus	Oracle Linux Local Security Checks	Local	high
337726	Oracle Linux 10 : pcp (ELSA-2026-55617)	Nessus	Oracle Linux Local Security Checks	Local	high
337640	RockyLinux 10 : pcp (RLSA-2026:55617)	Nessus	Rocky Linux Local Security Checks	Local	high
337232	Amazon Linux 2 : pcp, --advisory ALAS2-2026-3857 (ALAS-2026-3857)	Nessus	Amazon Linux Local Security Checks	Local	high
337093	RockyLinux 9 : pcp (RLSA-2026:55740)	Nessus	Rocky Linux Local Security Checks	Local	high
337091	RockyLinux 8 : pcp (RLSA-2026:55560)	Nessus	Rocky Linux Local Security Checks	Local	high
337087	RHEL 9 : pcp (RHSA-2026:55740)	Nessus	Red Hat Local Security Checks	Local	high
337086	RHEL 10 : pcp (RHSA-2026:55617)	Nessus	Red Hat Local Security Checks	Local	high
335990	RHEL 8 : pcp (RHSA-2026:55560)	Nessus	Red Hat Local Security Checks	Local	high
333027	SUSE SLES15: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2026:3505-1)	Nessus	SuSE Local Security Checks	Local	high
333021	SUSE SLES12 Security Update : pcp (SUSE-SU-2026:3508-1)	Nessus	SuSE Local Security Checks	Local	high
333020	SUSE SLED15: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2026:3507-1)	Nessus	SuSE Local Security Checks	Local	high
333016	SUSE SLES15: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2026:3506-1)	Nessus	SuSE Local Security Checks	Local	high
330817	Linux Distros Unpatched Vulnerability : CVE-2026-16529	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-16529

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high