Every CVE Search/ Get API key

CVE-2026-91147

Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

5.9 MediumFix available

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.64%Up 0.3 points since Sep 19, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.9

Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Record
CVE-2026-91147
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-06
EUVDEUVD-2026-83175 5.9

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Record
EUVD-2026-83175
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
GitHub AdvisoriesGHSA-cj5v-4j3m-m6j5 5.9

A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to...

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Record
GHSA-cj5v-4j3m-m6j5
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-04
NVD 5.9

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Record
CVE-2026-91147
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-06
OSVDEBIAN-CVE-2026-91147 5.9

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Record
DEBIAN-CVE-2026-91147
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVRLSA-2026:94485 7.5

Moderate: cockpit security, bug fix, and enhancement update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

  • cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash (CVE-2026-91147)

  • cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235)

Bug Fix(es) and Enhancement(s):

  • [cockpit] Overview page should not try to read insights-client.json anymore (JIRA:Rocky Linux-246964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:94485
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
Show 5 moreShow less
OSVRLSA-2026:94533 7.5

Important: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

  • cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash (CVE-2026-91147)

  • cockpit: Cockpit: Denial of Service via unbounded connection thread spawning (CVE-2026-91149)

  • cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:94533
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
OSVUBUNTU-CVE-2026-91147 5.9

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Record
UBUNTU-CVE-2026-91147
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:94485 No score

Moderate: cockpit security, bug fix, and enhancement update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

  • cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash (CVE-2026-91147)
  • cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235)

Bug Fix(es) and Enhancement(s):

  • [cockpit] Overview page should not try to read insights-client.json anymore (JIRA:RHEL-246964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:94485
Updated
2026-11-04
OSVALSA-2026:94533 No score

Important: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

  • cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash (CVE-2026-91147)
  • cockpit: Cockpit: Denial of Service via unbounded connection thread spawning (CVE-2026-91149)
  • cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:94533
Updated
2026-11-04
OSVopenSUSE-SU-2026:12427-1 No score

cockpit-370-1.1 on GA media

These are all security issues fixed in the cockpit-370-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12427-1
Updated
2026-11-06

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cockpit
AlmaLinux:8
From an advisory covering 2 CVEs
 before 310.10-1.el8_10
310.10-1.el8_10
cockpit-bridge
AlmaLinux:8
From an advisory covering 2 CVEs
 before 310.10-1.el8_10
310.10-1.el8_10
cockpit-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 310.10-1.el8_10
310.10-1.el8_10
cockpit-system
AlmaLinux:8
From an advisory covering 2 CVEs
 before 310.10-1.el8_10
310.10-1.el8_10
cockpit-ws
AlmaLinux:8
From an advisory covering 2 CVEs
 before 310.10-1.el8_10
310.10-1.el8_10
cockpit
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit-bridge
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit-doc
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit-packagekit
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit-storaged
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
Show 15 moreShow less
Affected packages
PackageAffectedFixed
cockpit-system
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit-ws
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit-ws-selinux
AlmaLinux:9
From an advisory covering 3 CVEs
 before 356.4-1.el9_8
356.4-1.el9_8
cockpit
Debian:12
 All versions, plus listed versions
287-1287.1-0+deb12u1287.1-0+deb12u2287.1-0+deb12u3288.1-1
Show 45 moreShow less
289-1290-1291-1292-1293-1294-1294.1-1295-1296-1297-1297-1~bpo12+1298-1299-1299-1~bpo12+1300-1300.1-1300.1-1~bpo12+1301-1301-1~bpo12+1302-1303-1303-1~bpo12+1304-1305-1305-1~bpo12+1306-1306-1~bpo12+1307-1307-1~bpo12+1308-1308-1~bpo12+1309-1309-1~bpo12+1310-1310.1-1310.1-1~bpo12+1311-1311-1~bpo12+1312-1313-1314-1316-1317-1317-2317-3
 None known
cockpit
Debian:13
 All versions, plus listed versions
337-1337-1+deb13u1337-1+deb13u2338-1339-1
Show 40 moreShow less
340-1341.1-1342-1343-1345-1345-1~bpo13+1346-1346-1~bpo13+1348-1348-1~bpo13+1350-1350-1~bpo13+1352-1352-1~bpo13+1353.1-1353.1-1~bpo13+1354-1354-1~bpo13+1355-1355-1~bpo13+1356-1356-1~bpo13+1358-1358-1~bpo13+1360-1360-1~bpo13+1362-1362-1~bpo13+1365-1365-1~bpo13+1366-1366-1~bpo13+1367-1367-1~bpo13+1368-1368-1~bpo13+1370-1370-1~bpo13+1371-1371-1~bpo13+1
 None known
cockpit
Debian:14
 before 368-1, plus listed versions
337-1338-1339-1340-1341.1-1
Show 33 moreShow less
342-1343-1345-1345-1~bpo13+1346-1346-1~bpo13+1348-1348-1~bpo13+1350-1350-1~bpo13+1352-1352-1~bpo13+1353.1-1353.1-1~bpo13+1354-1354-1~bpo13+1355-1355-1~bpo13+1356-1356-1~bpo13+1358-1358-1~bpo13+1360-1360-1~bpo13+1362-1362-1~bpo13+1365-1365-1~bpo13+1366-1366-1~bpo13+1367-1367-1~bpo13+1368-1~bpo13+1
368-1
cockpit
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:310.10-1.el8_10
0:310.10-1.el8_10
cockpit
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:356.4-1.el9_8.rocky.0.1
0:356.4-1.el9_8.rocky.0.1
cockpit
Ubuntu:18.04:LTS
 All versions, plus listed versions
151-1156-1157-1158-1160-1
Show 4 moreShow less
161-1162-1163-1164-1
 None known
cockpit
Ubuntu:20.04:LTS
 All versions, plus listed versions
202.1-1204-1206-1207-1208-1
Show 6 moreShow less
210-1211-1212-1213-1214.1-1215-1
 None known
cockpit
Ubuntu:22.04:LTS
 All versions, plus listed versions
252-1256-1257-1258-1259-1
Show 6 moreShow less
260-1261-1262-1263-1264-1264-1ubuntu0.22.04.1
 None known
cockpit
Ubuntu:24.04:LTS
 All versions, plus listed versions
300.1-1303-1304-1305-1306-1
Show 7 moreShow less
307-1308-1309-1310.1-1311-1312-1build2314-1
 None known
cockpit
Ubuntu:26.10
 All versions, plus listed versions
360-1362-1365-1367-1
 None known
cockpit
Ubuntu:26.04:LTS
 All versions, plus listed versions
346-1348-1350-1352-1353.1-1
Show 4 moreShow less
354-1355-1356-1360-1
 None known
cockpit
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 370-1.1
370-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affectedOSV
affectedCVE List, EUVD, NVD
affected, aliases, referencesOSV
affected, aliases, referencesEUVD, NVD, OSV
referencesCVE List, EUVD, GitHub Advisories, NVD
referencesCVE List
facts, referencesGitHub Advisories
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-91147 is a medium vulnerability (CVSS 5.9) in Red Hat Enterprise Linux 10, published September 18, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.64%, the 50th percentile. Fixed in cockpit 368-1.

References

Show 17 moreShow less
This page doesn't list everything

Left out here: 84 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open