CVE-2026-16530 describes a vulnerability in the PCP pmproxy service's pmLogLoadInDom() function. The flaw allows a remote attacker to bypass a bounds check by sending a crafted request, leading to service crash (DoS) and potential sensitive information disclosure from memory. The vulnerability is categorized under CWE-125 (Out-of-bounds Read). The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with no confidentiality impact but low integrity and high availability impacts. No patch or remediation details are provided in the vendor advisory excerpt.

Exploitation can cause the pmproxy service to crash, resulting in Denial of Service. There is also a possibility of sensitive information leakage from system memory. The vulnerability does not impact confidentiality but affects integrity and availability to a moderate degree.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided Red Hat advisory link does not include explicit patch or mitigation instructions in the available content. Users should monitor official vendor channels for updates and apply any forthcoming patches or workarounds.