Skip to content
OpenAdvisories

Vendor

cockpit-hq

24 known vulnerabilities.

Products

cockpit-hq/cockpit 14 cockpit 7 Cockpit CMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-31891 Public exploit

    Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()

    Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is potentially affected by a a SQL Injection vulnerability in the MongoLite Aggregation Optimizer. Any deployment where the `/a…

    cockpit-hq cockpit cockpit-hq/cockpit cockpit Ubuntu Packagist