CVE-2026-16531

Name of the Vulnerable Software and Affected Versions PCP pmproxy (affected versions not specified)

Description An unauthenticated remote attacker can exploit a path traversal vulnerability in the logger servlet by using a crafted hostname. This flaw allows the creation of arbitrary files and directories, which may result in a denial of service. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.