{"id":"CVE-2026-4631","aliases":["ALSA-2026:7383","ALSA-2026:7384","CLSA-2026-1777452220","DEBIAN-CVE-2026-4631","EUVD-2026-19814","GHSA-rq49-h582-83m7","MGASA-2026-0099","MGASA-2026-0175","RHBA-2026:21387","RHBA-2026:21388","RHSA-2026:7381","RHSA-2026:7382","RHSA-2026:7383","RHSA-2026:7384","RLSA-2026:7383","RLSA-2026:7384","SUSE-SU-2026:21106-1","SUSE-SU-2026:21184-1","SUSE-SU-2026:22770-1","SUSE-SU-2026:22837-1","UBUNTU-CVE-2026-4631","openSUSE-SU-2026:10531-1","openSUSE-SU-2026:20523-1","openSUSE-SU-2026:21399-1"],"status":"published","title":"Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.1548,"percentile":0.96846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-78"],"published":"2026-04-07T16:30:28Z","modified":"2026-11-09T12:49:53Z","exploits":[{"source":"pocgithub","id":"cyberheartmi9/CVE-2026-4631-cockpit-RCE","title":"cyberheartmi9/CVE-2026-4631-cockpit-RCE","date":"2026-04-18","url":"https://github.com/cyberheartmi9/CVE-2026-4631-cockpit-RCE"},{"source":"exploitdb","id":"EDB-52572","title":"Cockpit 359 - RCE","type":"webapps","platform":"multiple","date":"2026-05-21","url":"https://www.exploit-db.com/exploits/52572"},{"source":"pocgithub","id":"ExDev994/CVE-2026-4631-cockpit-RCE","title":"ExDev994/CVE-2026-4631-cockpit-RCE","date":"2026-07-12","url":"https://github.com/ExDev994/CVE-2026-4631-cockpit-RCE"},{"source":"nuclei","id":"CVE-2026-4631","title":"Cockpit Web Console \u003c 360 - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4631.yaml"}],"fixes":[{"ecosystem":"AlmaLinux:10","package":"cockpit-bridge","fixed_in":["344-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"cockpit-doc","fixed_in":["344-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"cockpit-packagekit","fixed_in":["344-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"cockpit-storaged","fixed_in":["344-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"cockpit-system","fixed_in":["344-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-bridge","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-doc","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-packagekit","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-storaged","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-system","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-ws","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-ws-selinux","fixed_in":["344-2.el9_7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-bridge","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-doc","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-packagekit","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-storaged","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-system","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-ws","fixed_in":["334.2-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cockpit","fixed_in":["337-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cockpit","fixed_in":["360-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"cockpit","fixed_in":["338-1.7.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-packagekit","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-storaged","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-bridge","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-debuginfo","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-debugsource","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-doc","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-system","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-ws","fixed_in":["0:334.1-3.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cockpit-packagekit","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cockpit-storaged","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-bridge","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-debuginfo","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-debugsource","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-doc","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-system","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-ws","fixed_in":["0:334.2-2.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-packagekit","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-storaged","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-bridge","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-debuginfo","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-debugsource","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-doc","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-system","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-ws","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-ws-selinux","fixed_in":["0:344-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-packagekit","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-storaged","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-bridge","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debuginfo","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debugsource","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-doc","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-system","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws-selinux","fixed_in":["0:344-2.el9_7"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"cockpit","fixed_in":["0:344-3.el10_1.rocky.0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"cockpit","fixed_in":["0:344-2.el9_7.rocky.0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit","fixed_in":["354-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit","fixed_in":["354-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit","fixed_in":["354-160000.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cockpit","fixed_in":["360-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"cockpit","fixed_in":["354-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-ws-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"344-2.el9_7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"334.2-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"337-1+deb13u1"}]}],"versions":["337-1"]},{"source":"osv","ecosystem":"Debian:14","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"360-1"}]}],"versions":["337-1","338-1","339-1","340-1","341.1-1","342-1","343-1","345-1","345-1~bpo13+1","346-1","346-1~bpo13+1","348-1","348-1~bpo13+1","350-1","350-1~bpo13+1","352-1","352-1~bpo13+1","353.1-1","353.1-1~bpo13+1","354-1","354-1~bpo13+1","355-1","355-1~bpo13+1","356-1","356-1~bpo13+1","358-1","358-1~bpo13+1","360-1~bpo13+1"]},{"source":"osv","ecosystem":"Mageia:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"338-1.7.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"356.2-1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el9_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cockpit-ws-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:356.1-1.el10_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.1-3.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:334.2-2.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"cockpit-ws-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-3.el10_1.rocky.0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:344-2.el9_7.rocky.0.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"364-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit-machines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit-repos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"cockpit-subscriptions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"364-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit-machines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit-repos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"cockpit-subscriptions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"364-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit-machines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit-repos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"cockpit-subscriptions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["151-1","156-1","157-1","158-1","160-1","161-1","162-1","163-1","164-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["202.1-1","204-1","206-1","207-1","208-1","210-1","211-1","212-1","213-1","214.1-1","215-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["333-1","337-1","339-1","342-1","343-1","345-1","346-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["360-1","362-1","365-1","367-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"360-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"364-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit-machines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"354-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit-repos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cockpit-subscriptions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2-160000.1.1"}]}],"bundled":6}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2026:21387","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2026:21388","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7381","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7382","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7383","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7384","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4631","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450246","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/cockpit-project/cockpit/security/advisories/GHSA-m4gv-x78h-3427","tags":["article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/10/5"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4631.json","tags":["x_sadp-csaf-vex"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4631","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rq49-h582-83m7","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-7383.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-7384.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1777452220.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4631","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0099.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35351","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2026-0175.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35563","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/20/19","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/339","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/340","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/341","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/341.1","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/342","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/343","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/344","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/345","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/346","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/347","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/348","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/349","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/350","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/351","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/352","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/353","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/353.1","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/354","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/355","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/356","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/356.1","tags":["web"]},{"url":"https://github.com/cockpit-project/cockpit/releases/tag/356.2","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r5fr-rjxr-66jc","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3wjm-5g86-c6p3","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_21387.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2453499","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2950","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2950","tags":["advisory"]},{"url":"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4631","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2453496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4800","tags":["advisory"]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["article"]},{"url":"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_21388.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7381.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7382.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7383.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7384.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:7383","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:7384","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621106-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1261829","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4631","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621184-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622770-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236149","tags":["report"]},{"url":"https://bugzilla.suse.com/1257033","tags":["report"]},{"url":"https://bugzilla.suse.com/1257325","tags":["report"]},{"url":"https://bugzilla.suse.com/1257698","tags":["report"]},{"url":"https://bugzilla.suse.com/1257836","tags":["report"]},{"url":"https://bugzilla.suse.com/1257838","tags":["report"]},{"url":"https://bugzilla.suse.com/1257840","tags":["report"]},{"url":"https://bugzilla.suse.com/1258040","tags":["report"]},{"url":"https://bugzilla.suse.com/1258637","tags":["report"]},{"url":"https://bugzilla.suse.com/1258640","tags":["report"]},{"url":"https://bugzilla.suse.com/1258641","tags":["report"]},{"url":"https://bugzilla.suse.com/1259010","tags":["report"]},{"url":"https://bugzilla.suse.com/1259013","tags":["report"]},{"url":"https://bugzilla.suse.com/1259015","tags":["report"]},{"url":"https://bugzilla.suse.com/1259210","tags":["report"]},{"url":"https://bugzilla.suse.com/1259774","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4802","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622837-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-4631","tags":["report"]},{"url":"https://github.com/cockpit-project/cockpit/pull/23105","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-4631","title":"Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","status":"published","published":"2026-04-07T16:30:28.069Z","modified":"2026-11-04T22:37:31.042Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-78","CWE-78"],"updated_at":"2026-11-04T23:40:09.798467Z"}],"euvd":[{"id":"EUVD-2026-19814","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","status":"published","published":"2026-04-07T16:30:28Z","modified":"2026-11-04T22:37:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T00:47:41.139684Z"}],"ghsa":[{"id":"GHSA-rq49-h582-83m7","title":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web...","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","status":"published","published":"2026-04-07T18:31:38Z","modified":"2026-04-07T18:31:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:07:11.075264Z"}],"nvd":[{"id":"CVE-2026-4631","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","status":"published","published":"2026-04-07T17:16:38.01Z","modified":"2026-11-04T23:17:37.933Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-05T01:45:09.431178Z"}],"osv":[{"id":"DEBIAN-CVE-2026-4631","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","status":"published","published":"2026-04-07T17:16:38.01Z","modified":"2026-11-05T09:47:35.486230204Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"RHBA-2026:21387","title":"Red Hat Bug Fix Advisory: cockpit bug fix and enhancement update","status":"published","published":"2026-08-18T10:09:07Z","modified":"2026-10-16T10:43:09.753258131Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2026:21388","title":"Red Hat Bug Fix Advisory: cockpit bug fix and enhancement update","status":"published","published":"2026-10-16T10:09:31Z","modified":"2026-10-16T10:30:37.083070039Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2026:7381","title":"Red Hat Security Advisory: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","status":"published","published":"2026-04-11T10:06:14Z","modified":"2026-10-16T10:25:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7382","title":"Red Hat Security Advisory: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","status":"published","published":"2026-04-11T10:06:15Z","modified":"2026-10-16T10:25:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7383","title":"Red Hat Security Advisory: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","status":"published","published":"2026-04-11T10:06:15Z","modified":"2026-10-16T10:25:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7384","title":"Red Hat Security Advisory: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","status":"published","published":"2026-04-11T10:06:16Z","modified":"2026-10-16T10:25:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:7383","title":"Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","description":"Cockpit enables users to administer GNU/Linux servers using a web browser. It\noffers network configuration, log inspection, diagnostic reports, SELinux\ntroubleshooting, interactive command-line sessions, and more.\n\nSecurity Fix(es):\n\n* cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2026-05-21T16:30:00.730913Z","modified":"2026-05-21T17:00:14.517721758Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:7384","title":"Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","description":"Cockpit enables users to administer GNU/Linux servers using a web browser. It\noffers network configuration, log inspection, diagnostic reports, SELinux\ntroubleshooting, interactive command-line sessions, and more.\n\nSecurity Fix(es):\n\n* cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2026-05-21T16:27:07.11942Z","modified":"2026-05-21T17:00:14.492890086Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-4631","description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.","status":"published","published":"2026-04-07T17:16:00Z","modified":"2026-11-09T12:49:53.870991178Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2026:7383","title":"Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","description":"Cockpit enables users to administer GNU/Linux servers using a web browser. It  \noffers network configuration, log inspection, diagnostic reports, SELinux  \ntroubleshooting, interactive command-line sessions, and more.  \n\nSecurity Fix(es):  \n\n  * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE page(s)  \nlisted in the References section.\n","status":"published","published":"2026-04-10T00:00:00Z","modified":"2026-10-29T11:30:50.822910683Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:7384","title":"Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection","description":"Cockpit enables users to administer GNU/Linux servers using a web browser. It  \noffers network configuration, log inspection, diagnostic reports, SELinux  \ntroubleshooting, interactive command-line sessions, and more.  \n\nSecurity Fix(es):  \n\n  * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE page(s)  \nlisted in the References section.\n","status":"published","published":"2026-04-10T00:00:00Z","modified":"2026-10-29T11:32:37.832025893Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"CLSA-2026-1777452220","title":"cockpit: Fix of CVE-2026-4631","description":"- CVE-2026-4631: Fix SSH command-line argument injection in cockpit-ws / beiboot (Critical RCE)","status":"published","published":"2026-04-29T08:43:45Z","modified":"2026-06-01T00:32:48.975344274Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"MGASA-2026-0099","title":"Updated cockpit-338 packages fix security vulnerability","description":"Unauthenticated remote code execution due to ssh command-line argument\ninjection. (CVE-2026-4631)\n","status":"published","published":"2026-04-16T17:53:04Z","modified":"2026-04-16T18:00:07.383938Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"MGASA-2026-0175","title":"Updated cockpit packages fix security vulnerabilities","description":"CVE-2026-4631, Cockpit's remote login feature passes user-supplied\nhostnames and usernames from the web interface to the SSH client without\nvalidation or sanitization. An attacker with network access to the\nCockpit web service can craft a single HTTP request to the login\nendpoint that injects malicious SSH options or shell commands, achieving\ncode execution on the Cockpit host without valid credentials. The\ninjection occurs during the authentication flow before any credential\nverification takes place, meaning no login is required to exploit the\nvulnerability.\nCVE-2026-4800, lodash vulnerable to Code Injection via `_.template`\nimports key names\nCVE-2026-4802, A flaw was found in Cockpit. This vulnerability allows a\nremote attacker to achieve arbitrary command execution on the host by\nexploiting unsanitized user-controlled parameters within crafted links\nin the system logs user interface (UI). An attacker can inject shell\nmetacharacters and command substitutions into these parameters, leading\nto the execution of arbitrary shell commands on the affected system.\nThis could result in a complete system compromise.\n","status":"published","published":"2026-06-05T17:37:45Z","modified":"2026-06-05T18:03:34.31879047Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10531-1","title":"cockpit-360-1.1 on GA media","description":"These are all security issues fixed in the cockpit-360-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-11T00:00:00Z","modified":"2026-04-12T10:18:32.494679Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20523-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\nChanges in cockpit:\n\n- CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)\n","status":"published","published":"2026-04-13T14:07:43Z","modified":"2026-04-22T18:26:57.509143Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21399-1","title":"Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions","description":"This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from\n  global prototypes (bsc#1257325).\n- CVE-2026-4631: SSH command-line argument injection can lead to unauthenticated remote code execution (bsc#1261829).\n- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and\n  may crash a Node.js process (bsc#1257836 bsc#1257838 bsc#1257840).\n- CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character\n  that doesn't appear in the test string (bsc#1258637 bsc#1258640 bsc#1258641).\n- CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential backtracking\n  complexity and a ReDoS (bsc#1259010 bsc#1259013 bsc#1259015).\n\nNon security issues fixed:\n\n- cockpit webUI - 'Software updates - install all updates' got an unexpected internal error (bsc#1259210).\n- cockpit-machines does not work out of the box, missing libvirt daemon (bsc#1236149).\n\nChanges for cockpit:\n\n- Update to 364.\n\n- Update to 361 (jsc#PED-15706/jsc#CPT-183):\n\n * Remove all \"Mount\" actions in Anaconda mode\n * Dependency updates\n\n- Update to 360:\n * ws: be more explicit when handling hostnames on cli bsc#1261829/CVE-2026-4631\n * ws: support loading a custom login page\n\n- Update to 358:\n\n * Networking: Add Wi-Fi support\n * Cockpit Client updated to GTK 4\n * Bugfixes and translation updates\n\n- Update to 357:\n\n * lib: Use browser context menu on shift\n * bridge: support Python 3.14 on old kernels (RHEL 8)\n\n- Update to 356:\n\n * systemd: Allow editing timers created by Cockpit\n * Convert license headers to SPDX format\n\n- Update to 355:\n\n * ws: Remove obsolete pam_cockpit_cert module\n * shell: add StartTransientUnit as a sudo alternative\n\nChanges for cockpit-machines:\n\n- Update to 354.\n\n- Update to 352:\n\n - Improvements to the \"Add disk\" and \"Create Volume\" dialogs.\n\n- Update suse_version requirement to function with the planned bump (jsc#PED-15820).\n- Drop explict dependency on libvirt (bsc#1258040, bsc#1236149).\n\n- Update to 348:\n\n * Translation updates\n * Convert license headers to SPDX format\n * Now requires cockpit-devel 356 due to the replacement of xterm/addon-canvas with xterm/addon-webgl\n\n- Update to 347:\n * Bug fixes and translation updates\n\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-packages:\n\n- Update to version 5:\n\n * Support transactional systems\n * Improve error/success messages\n * Translation updates\n\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-podman:\n\n- Update to 128.\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-repos:\n\n- Update to 4.8.\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-subscriptions:\n\n- Update to version 16.2 (bsc#1257033).\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n","status":"published","published":"2026-07-21T15:45:48Z","modified":"2026-07-24T18:24:25.081526809Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:21106-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\nChanges in cockpit:\n\n- CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)\n","status":"published","published":"2026-04-13T14:11:34Z","modified":"2026-04-17T18:23:57.040212Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21184-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\nChanges in cockpit:\n\n- CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)\n","status":"published","published":"2026-04-13T14:11:34Z","modified":"2026-04-22T18:25:52.219888Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:22770-1","title":"Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions","description":"This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from\n  global prototypes (bsc#1257325).\n- CVE-2026-4631: SSH command-line argument injection can lead to unauthenticated remote code execution (bsc#1261829).\n- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and\n  may crash a Node.js process (bsc#1257836 bsc#1257838 bsc#1257840).\n- CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character\n  that doesn't appear in the test string (bsc#1258637 bsc#1258640 bsc#1258641).\n- CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential backtracking\n  complexity and a ReDoS (bsc#1259010 bsc#1259013 bsc#1259015).\n\nNon security issues fixed:\n\n- cockpit webUI - 'Software updates - install all updates' got an unexpected internal error (bsc#1259210).\n- cockpit-machines does not work out of the box, missing libvirt daemon (bsc#1236149).\n\nChanges for cockpit:\n\n- Update to 364.\n\n- Update to 361 (jsc#PED-15706/jsc#CPT-183):\n\n * Remove all \"Mount\" actions in Anaconda mode\n * Dependency updates\n\n- Update to 360:\n * ws: be more explicit when handling hostnames on cli bsc#1261829/CVE-2026-4631\n * ws: support loading a custom login page\n\n- Update to 358:\n\n * Networking: Add Wi-Fi support\n * Cockpit Client updated to GTK 4\n * Bugfixes and translation updates\n\n- Update to 357:\n\n * lib: Use browser context menu on shift\n * bridge: support Python 3.14 on old kernels (RHEL 8)\n\n- Update to 356:\n\n * systemd: Allow editing timers created by Cockpit\n * Convert license headers to SPDX format\n\n- Update to 355:\n\n * ws: Remove obsolete pam_cockpit_cert module\n * shell: add StartTransientUnit as a sudo alternative\n\nChanges for cockpit-machines:\n\n- Update to 354.\n\n- Update to 352:\n\n - Improvements to the \"Add disk\" and \"Create Volume\" dialogs.\n\n- Update suse_version requirement to function with the planned bump (jsc#PED-15820).\n- Drop explict dependency on libvirt (bsc#1258040, bsc#1236149).\n\n- Update to 348:\n\n * Translation updates\n * Convert license headers to SPDX format\n * Now requires cockpit-devel 356 due to the replacement of xterm/addon-canvas with xterm/addon-webgl\n\n- Update to 347:\n * Bug fixes and translation updates\n\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-packages:\n\n- Update to version 5:\n\n * Support transactional systems\n * Improve error/success messages\n * Translation updates\n\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-podman:\n\n- Update to 128.\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-repos:\n\n- Update to 4.8.\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-subscriptions:\n\n- Update to version 16.2 (bsc#1257033).\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n","status":"published","published":"2026-07-21T16:05:47Z","modified":"2026-07-23T18:24:20.970797039Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22837-1","title":"Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions","description":"This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from\n  global prototypes (bsc#1257325).\n- CVE-2026-4631: SSH command-line argument injection can lead to unauthenticated remote code execution (bsc#1261829).\n- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and\n  may crash a Node.js process (bsc#1257836 bsc#1257838 bsc#1257840).\n- CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character\n  that doesn't appear in the test string (bsc#1258637 bsc#1258640 bsc#1258641).\n- CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential backtracking\n  complexity and a ReDoS (bsc#1259010 bsc#1259013 bsc#1259015).\n\nNon security issues fixed:\n\n- cockpit webUI - 'Software updates - install all updates' got an unexpected internal error (bsc#1259210).\n- cockpit-machines does not work out of the box, missing libvirt daemon (bsc#1236149).\n\nChanges for cockpit:\n\n- Update to 364.\n\n- Update to 361 (jsc#PED-15706/jsc#CPT-183):\n\n * Remove all \"Mount\" actions in Anaconda mode\n * Dependency updates\n\n- Update to 360:\n * ws: be more explicit when handling hostnames on cli bsc#1261829/CVE-2026-4631\n * ws: support loading a custom login page\n\n- Update to 358:\n\n * Networking: Add Wi-Fi support\n * Cockpit Client updated to GTK 4\n * Bugfixes and translation updates\n\n- Update to 357:\n\n * lib: Use browser context menu on shift\n * bridge: support Python 3.14 on old kernels (RHEL 8)\n\n- Update to 356:\n\n * systemd: Allow editing timers created by Cockpit\n * Convert license headers to SPDX format\n\n- Update to 355:\n\n * ws: Remove obsolete pam_cockpit_cert module\n * shell: add StartTransientUnit as a sudo alternative\n\nChanges for cockpit-machines:\n\n- Update to 354.\n\n- Update to 352:\n\n - Improvements to the \"Add disk\" and \"Create Volume\" dialogs.\n\n- Update suse_version requirement to function with the planned bump (jsc#PED-15820).\n- Drop explict dependency on libvirt (bsc#1258040, bsc#1236149).\n\n- Update to 348:\n\n * Translation updates\n * Convert license headers to SPDX format\n * Now requires cockpit-devel 356 due to the replacement of xterm/addon-canvas with xterm/addon-webgl\n\n- Update to 347:\n * Bug fixes and translation updates\n\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-packages:\n\n- Update to version 5:\n\n * Support transactional systems\n * Improve error/success messages\n * Translation updates\n\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-podman:\n\n- Update to 128.\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-repos:\n\n- Update to 4.8.\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-subscriptions:\n\n- Update to version 16.2 (bsc#1257033).\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n","status":"published","published":"2026-07-21T16:05:47Z","modified":"2026-07-28T18:24:09.137480038Z","updated_at":"2026-11-02T15:54:03.080707Z"}]}}