Privilege Escalation in PCP Linux Sockets Module by Red Hat
CVE-2026-16526
8.8HIGH
What is CVE-2026-16526?
A security issue exists in the PCP linux_sockets module that allows an attacker with initial code execution to exploit an unsecured internal connection. This vulnerability can be leveraged to escalate privileges, enabling the execution of arbitrary commands with root access, potentially compromising the integrity of the system.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Francisco Alisson Bezerra (TIM Security Red Team Research, TIM S.p.A), Lucas Gabriel Alves (TIM Security Red Team Research, TIM S.p.A), and Massimiliano Brolli (TIM Security Red Team Research, TIM S.p.A) for reporting this issue.