Is CVE-2026-16529 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16529?

CVE-2026-16529 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-16529

Description

A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.