Skip to content
OpenAdvisories

Vendor

cockpit-hq

24 known vulnerabilities.

Products

cockpit-hq/cockpit 14 cockpit 7 Cockpit CMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-105217

    Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php

    Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in-the-middle attackers on the outbound path to site_url can present any certificate…

    cockpit-hq cockpit