Vulnerability in Red Hat Enterprise Linux 10
CVE-2026-16526
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
Frequently asked questions
- What is CVE-2026-16526?
- CVE-2026-16526 is a high-severity vulnerability in Red Hat Enterprise Linux 10, classified under Exposure of File Descriptor to Unintended Control Sphere (File Descriptor Leak). CVSS score: 8.8/10. Published 2026-07-30.
- How severe is CVE-2026-16526?
- High severity. CVSS v3 base score is 8.8 out of 10.