CVE-2015-5190: Pacemaker/corosync Configuration System Project Pacemaker/corosync Configuration System

High severity, CVSS 8.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL.

Affected products

• Pacemaker/corosync Configuration System Project Pacemaker/corosync Configuration System: up to and including 0.9.139

Published 2015-09-03. Last modified 2026-06-17.