CVE-2026-91148
cockpit-370-1.1 on GA media
No scoreFix available
[Unknown description]
What each source reports
OSVopenSUSE-SU-2026:12427-1 No score
cockpit-370-1.1 on GA media
These are all security issues fixed in the cockpit-370-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12427-1- Updated
- 2026-11-06
OSVUBUNTU-CVE-2026-91148 No score
[Unknown description]
- Record
UBUNTU-CVE-2026-91148- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cockpitDebian:12 |
All versions, plus listed versions 287-1287.1-0+deb12u1287.1-0+deb12u2287.1-0+deb12u3288.1-1 Show 45 moreShow less289-1290-1291-1292-1293-1294-1294.1-1295-1296-1297-1297-1~bpo12+1298-1299-1299-1~bpo12+1300-1300.1-1300.1-1~bpo12+1301-1301-1~bpo12+1302-1303-1303-1~bpo12+1304-1305-1305-1~bpo12+1306-1306-1~bpo12+1307-1307-1~bpo12+1308-1308-1~bpo12+1309-1309-1~bpo12+1310-1310.1-1310.1-1~bpo12+1311-1311-1~bpo12+1312-1313-1314-1316-1317-1317-2317-3 |
None known |
cockpitDebian:13 |
All versions, plus listed versions 337-1337-1+deb13u1337-1+deb13u2338-1339-1 Show 36 moreShow less340-1341.1-1342-1343-1345-1345-1~bpo13+1346-1346-1~bpo13+1348-1348-1~bpo13+1350-1350-1~bpo13+1352-1352-1~bpo13+1353.1-1353.1-1~bpo13+1354-1354-1~bpo13+1355-1355-1~bpo13+1356-1356-1~bpo13+1358-1358-1~bpo13+1360-1360-1~bpo13+1362-1362-1~bpo13+1365-1365-1~bpo13+1366-1366-1~bpo13+1367-1367-1~bpo13+1368-1368-1~bpo13+1 |
None known |
cockpitDebian:14 |
before 368-1, plus listed versions 337-1338-1339-1340-1341.1-1 Show 33 moreShow less342-1343-1345-1345-1~bpo13+1346-1346-1~bpo13+1348-1348-1~bpo13+1350-1350-1~bpo13+1352-1352-1~bpo13+1353.1-1353.1-1~bpo13+1354-1354-1~bpo13+1355-1355-1~bpo13+1356-1356-1~bpo13+1358-1358-1~bpo13+1360-1360-1~bpo13+1362-1362-1~bpo13+1365-1365-1~bpo13+1366-1366-1~bpo13+1367-1367-1~bpo13+1368-1~bpo13+1 |
368-1 |
cockpitUbuntu:18.04:LTS |
All versions, plus listed versions 151-1156-1157-1158-1160-1 Show 4 moreShow less161-1162-1163-1164-1 |
None known |
cockpitUbuntu:20.04:LTS |
All versions, plus listed versions 202.1-1204-1206-1207-1208-1 Show 6 moreShow less210-1211-1212-1213-1214.1-1215-1 |
None known |
cockpitUbuntu:22.04:LTS |
All versions, plus listed versions 252-1256-1257-1258-1259-1 Show 6 moreShow less260-1261-1262-1263-1264-1264-1ubuntu0.22.04.1 |
None known |
cockpitUbuntu:24.04:LTS |
All versions, plus listed versions 300.1-1303-1304-1305-1306-1 Show 7 moreShow less307-1308-1309-1310.1-1311-1312-1build2314-1 |
None known |
cockpitUbuntu:26.10 |
All versions, plus listed versions 360-1362-1365-1367-1 |
None known |
cockpitUbuntu:26.04:LTS |
All versions, plus listed versions 346-1348-1350-1352-1353.1-1 Show 4 moreShow less354-1355-1356-1360-1 |
None known |
cockpitopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 370-1.1 | 370-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, facts, references, title | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-91148 is a vulnerability with no CVSS score yet in cockpit, published October 2, 2026. No source lists public exploit code. Fixed in cockpit 368-1.
References
security-tracker.debian.org/tracker/CVE-2026-91148
ubuntu.com/security/CVE-2026-91148
cve.org/CVERecord?id=CVE-2026-91148
github.com/cockpit-project/cockpit/commit/6e76c96272a4ebcb085c948e5cc9189eeee561af
suse.com/security/cve/CVE-2026-91147
This page doesn't list everything
Left out here: 80 versions. The JSON record has them.