Skip to content
OpenAdvisories

Vendor

Cockpit

1 known vulnerabilities.

Products

Cockpit CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-34965

    Cockpit CMS Authenticated Remote Code Execution via Collections

    Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules paramet…

    Cockpit Cockpit CMS