Package · Ubuntu

cockpit

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.9

CVE-2026-91147

Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the `WebService.UrlRoot` is configured and a request is made to the exact URL-root p…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Sep 18, 2026
Medium 6.1

CVE-2026-39275 Public exploit

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary cod…

cockpit Ubuntu

Aug 26, 2026