https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:48:39.104799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2566 ALSA-2024:2566 — Important: pcp security, bug fix, and enhancement update 2026-10-04T12:48:39.160107+00:00

Affected: AlmaLinux:9: pcp, AlmaLinux:9: pcp-conf, AlmaLinux:9: pcp-devel, AlmaLinux:9: pcp-doc, AlmaLinux:9: pcp-export-pcp2elasticsearch, AlmaLinux:9: pcp-export-pcp2graphite, AlmaLinux:9: pcp-export-pcp2influxdb, AlmaLinux:9: pcp-export-pcp2json, AlmaLinux:9: pcp-export-pcp2spark, AlmaLinux:9: pcp-export-pcp2xml and 94 more

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

* pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-02823 bdu:2024-02823 2026-10-04T12:48:39.160321+00:00 bdu:2024-02823 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 certfr-2024-avi-0579 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T12:48:39.160342+00:00 certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/euvd-2026-261409 EUVD-2026-261409 2026-10-04T12:48:39.160358+00:00 EUVD-2026-261409 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3019 fkie_cve-2024-3019 2026-10-04T12:48:39.160369+00:00

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.

 https://cve.radiocsirt.org/vuln/ghsa-g58w-wr93-q367 GHSA-g58w-wr93-q367 2026-10-04T12:48:39.160394+00:00

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.

 https://cve.radiocsirt.org/vuln/gsd-2024-3019 gsd-2024-3019 2026-10-04T12:48:39.160411+00:00 gsd-2024-3019 https://cve.radiocsirt.org/vuln/oesa-2024-1435 OESA-2024-1435 — pcp security update 2026-10-04T12:48:39.160421+00:00

Affected: openEuler:22.03-LTS-SP3: pcp

PCP provides a range of services that may be used to monitor and manage system performance. These services are distributed and scalable to accommodate the most complex system configurations and performance problems. Security Fix(es): A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.(CVE-2024-3019)

 https://cve.radiocsirt.org/vuln/rhsa-2024:2566 RHSA-2024:2566 — Red Hat Security Advisory: pcp security, bug fix, and enhancement update 2026-10-04T12:48:39.160445+00:00

pcp: exposure of the redis server backend allows remote command execution via pmproxy

 https://cve.radiocsirt.org/vuln/rhsa-2024:3321 RHSA-2024:3321 — Red Hat Security Advisory: pcp security update 2026-10-04T12:48:39.160463+00:00

pcp: exposure of the redis server backend allows remote command execution via pmproxy

 https://cve.radiocsirt.org/vuln/suse-su-2024:3533-1 SUSE-SU-2024:3533-1 — Security update for pcp 2026-10-04T12:48:39.160478+00:00

Security update for pcp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3019 UBUNTU-CVE-2024-3019 2026-10-04T12:48:39.160493+00:00

Affected: Ubuntu:16.04:LTS: pcp, Ubuntu:18.04:LTS: pcp, Ubuntu:20.04:LTS: pcp, Ubuntu:22.04:LTS: pcp, Ubuntu:24.04:LTS: pcp, Ubuntu:25.10: pcp, Ubuntu:26.04:LTS: pcp

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1003 WID-SEC-W-2024-1003 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-04T12:48:39.160521+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, Cross-Site Scripting (XSS)-Angriffe durchzuführen oder einen Men-in-the-Middle-Angriff auszuführen.