GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2026:23277-1

Vulnerability from csaf_suse - Published: 2026-08-24 20:47 - Updated: 2026-09-17 16:18
Summary
Security update for pcp
Severity
Moderate
Notes
Title of the patch: Security update for pcp
Description of the patch: This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924). - CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926). - CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927). - command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928). - command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).
Patchnames: SUSE-SL-Micro-6.2-1495
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-16524
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch —
Vendor Fix
Threats
Impact critical
CVE-2026-16526
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 9 products, the same list as for CVE-2026-16524
Threats
Impact critical
CVE-2026-16527
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 9 products, the same list as for CVE-2026-16524
Threats
Impact critical
CVE-2026-16529
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 9 products, the same list as for CVE-2026-16524
Threats
Impact critical
CVE-2026-16530
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Recommended 9 products, the same list as for CVE-2026-16524
Threats
Impact critical
CVE-2026-16531
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 9 products, the same list as for CVE-2026-16524
Threats
Impact critical
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for pcp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for pcp fixes the following issues:\n\n- CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922).\n- CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credentials\n  (bsc#1272923).\n- CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).\n- CVE-2026-16529: integer overflow in `__pmGetPDU` leads to permanent DoS (bsc#1272925).\n- CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).\n- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).\n- command injection in `pmieconf` `write_pmiefile` via `$HOME` and `-f` (bsc#1272928).\n- command injection in `pmlogcp/pmlogmv` `do_link` via unsanitised filenames (bsc#1272930).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SL-Micro-6.2-1495",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23277-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:23277-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623277-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:23277-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028572.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272922",
        "url": "https://bugzilla.suse.com/1272922"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272923",
        "url": "https://bugzilla.suse.com/1272923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272924",
        "url": "https://bugzilla.suse.com/1272924"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272925",
        "url": "https://bugzilla.suse.com/1272925"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272926",
        "url": "https://bugzilla.suse.com/1272926"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272927",
        "url": "https://bugzilla.suse.com/1272927"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272928",
        "url": "https://bugzilla.suse.com/1272928"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272930",
        "url": "https://bugzilla.suse.com/1272930"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-16524 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-16524/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-16526 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-16526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-16527 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-16527/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-16529 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-16529/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-16530 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-16530/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-16531 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-16531/"
      }
    ],
    "title": "Security update for pcp",
    "tracking": {
      "current_release_date": "2026-09-17T16:18:27Z",
      "generator": {
        "date": "2026-08-24T20:47:16Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:23277-1",
      "initial_release_date": "2026-08-24T20:47:16Z",
      "revision_history": [
        {
          "date": "2026-08-24T20:47:16Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T19:26:16Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:13:50Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T16:18:27Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpcp3-0:6.2.0-160000.4.1.aarch64",
                "product": {
                  "name": "libpcp3-0:6.2.0-160000.4.1.aarch64",
                  "product_id": "libpcp3-0:6.2.0-160000.4.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp3@6.2.0-160000.4.1?arch=aarch64\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpcp_import1-0:6.2.0-160000.4.1.aarch64",
                "product": {
                  "name": "libpcp_import1-0:6.2.0-160000.4.1.aarch64",
                  "product_id": "libpcp_import1-0:6.2.0-160000.4.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp_import1@6.2.0-160000.4.1?arch=aarch64\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pcp-conf-0:6.2.0-160000.4.1.noarch",
                "product": {
                  "name": "pcp-conf-0:6.2.0-160000.4.1.noarch",
                  "product_id": "pcp-conf-0:6.2.0-160000.4.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/pcp-conf@6.2.0-160000.4.1?arch=noarch\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpcp3-0:6.2.0-160000.4.1.ppc64le",
                "product": {
                  "name": "libpcp3-0:6.2.0-160000.4.1.ppc64le",
                  "product_id": "libpcp3-0:6.2.0-160000.4.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp3@6.2.0-160000.4.1?arch=ppc64le\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
                "product": {
                  "name": "libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
                  "product_id": "libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp_import1@6.2.0-160000.4.1?arch=ppc64le\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpcp3-0:6.2.0-160000.4.1.s390x",
                "product": {
                  "name": "libpcp3-0:6.2.0-160000.4.1.s390x",
                  "product_id": "libpcp3-0:6.2.0-160000.4.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp3@6.2.0-160000.4.1?arch=s390x\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpcp_import1-0:6.2.0-160000.4.1.s390x",
                "product": {
                  "name": "libpcp_import1-0:6.2.0-160000.4.1.s390x",
                  "product_id": "libpcp_import1-0:6.2.0-160000.4.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp_import1@6.2.0-160000.4.1?arch=s390x\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpcp3-0:6.2.0-160000.4.1.x86_64",
                "product": {
                  "name": "libpcp3-0:6.2.0-160000.4.1.x86_64",
                  "product_id": "libpcp3-0:6.2.0-160000.4.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp3@6.2.0-160000.4.1?arch=x86_64\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpcp_import1-0:6.2.0-160000.4.1.x86_64",
                "product": {
                  "name": "libpcp_import1-0:6.2.0-160000.4.1.x86_64",
                  "product_id": "libpcp_import1-0:6.2.0-160000.4.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:sgi:performance_co-pilot:6.2.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpcp_import1@6.2.0-160000.4.1?arch=x86_64\u0026upstream=pcp-0:6.2.0-160000.4.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.2",
                "product": {
                  "name": "SUSE Linux Micro 6.2",
                  "product_id": "SUSE Linux Micro 6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp3-0:6.2.0-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64"
        },
        "product_reference": "libpcp3-0:6.2.0-160000.4.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp3-0:6.2.0-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le"
        },
        "product_reference": "libpcp3-0:6.2.0-160000.4.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp3-0:6.2.0-160000.4.1.s390x as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x"
        },
        "product_reference": "libpcp3-0:6.2.0-160000.4.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp3-0:6.2.0-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64"
        },
        "product_reference": "libpcp3-0:6.2.0-160000.4.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp_import1-0:6.2.0-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64"
        },
        "product_reference": "libpcp_import1-0:6.2.0-160000.4.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp_import1-0:6.2.0-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le"
        },
        "product_reference": "libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp_import1-0:6.2.0-160000.4.1.s390x as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x"
        },
        "product_reference": "libpcp_import1-0:6.2.0-160000.4.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpcp_import1-0:6.2.0-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64"
        },
        "product_reference": "libpcp_import1-0:6.2.0-160000.4.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcp-conf-0:6.2.0-160000.4.1.noarch as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        },
        "product_reference": "pcp-conf-0:6.2.0-160000.4.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-16524",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-16524"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A command injection flaw in PCP\u0027s linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric.\nThis failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-16524",
          "url": "https://www.suse.com/security/cve/CVE-2026-16524"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271393 for CVE-2026-16524",
          "url": "https://bugzilla.suse.com/1271393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T20:47:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-16524"
    },
    {
      "cve": "CVE-2026-16526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-16526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in the PCP linux_sockets module exposes an unsecured internal connection.\nAn attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-16526",
          "url": "https://www.suse.com/security/cve/CVE-2026-16526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271393 for CVE-2026-16526",
          "url": "https://bugzilla.suse.com/1271393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T20:47:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-16526"
    },
    {
      "cve": "CVE-2026-16527",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-16527"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-16527",
          "url": "https://www.suse.com/security/cve/CVE-2026-16527"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271393 for CVE-2026-16527",
          "url": "https://bugzilla.suse.com/1271393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T20:47:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-16527"
    },
    {
      "cve": "CVE-2026-16529",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-16529"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-16529",
          "url": "https://www.suse.com/security/cve/CVE-2026-16529"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271393 for CVE-2026-16529",
          "url": "https://bugzilla.suse.com/1271393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T20:47:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-16529"
    },
    {
      "cve": "CVE-2026-16530",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-16530"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in the `pmLogLoadInDom()` function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the `pmproxy` service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system\u0027s memory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-16530",
          "url": "https://www.suse.com/security/cve/CVE-2026-16530"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271393 for CVE-2026-16530",
          "url": "https://bugzilla.suse.com/1271393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T20:47:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-16530"
    },
    {
      "cve": "CVE-2026-16531",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-16531"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
          "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
          "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-16531",
          "url": "https://www.suse.com/security/cve/CVE-2026-16531"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271393 for CVE-2026-16531",
          "url": "https://bugzilla.suse.com/1271393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp3-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.aarch64",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.ppc64le",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.s390x",
            "SUSE Linux Micro 6.2:libpcp_import1-0:6.2.0-160000.4.1.x86_64",
            "SUSE Linux Micro 6.2:pcp-conf-0:6.2.0-160000.4.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T20:47:16Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-16531"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.