CVE-2026-16530

Name of the Vulnerable Software and Affected Versions PCP (Performance Co-Pilot) pmproxy service (affected versions not specified)

Description A flaw in the pmproxy service allows a remote attacker to send a specially crafted request to the pmLogLoadInDom() function. This action bypasses a critical bounds check, which can result in a Denial of Service (DoS) by crashing the service or lead to the leakage of sensitive information from the system memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.