Is CVE-2026-16531 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16531?

CVE-2026-16531 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-16531

Description

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.