CVE Intelligence

Percona vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Percona products: 1 record(s), with severity, exploitation and fixes.

Monitoring And Management 1

Exploited only (KEV) →

CVE-2026-25212 Critical · 9.9 CWE-250 Apr 2, 2026
Execution with Unnecessary Privileges in Percona Monitoring And Management
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.