cockpit vulnerabilities (Red Hat)

18 vulnerabilities.

• cockpit Red Hat Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui CVE-2026-4802 Public exploitFix available 8.0 HighMay 11, 2026
• cockpit Red Hat Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection CVE-2026-4631 Public exploitFix available EPSS 15.5% 9.8 CriticalApril 7, 2026
• cockpit Red Hat lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-4800 Public exploitFix available 8.1 HighMarch 31, 2026
• cockpit Red Hat lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` CVE-2026-2950 Fix available 6.5 MediumMarch 31, 2026
• cockpit Red Hat Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option CVE-2024-6126 Fix available 3.2 LowJuly 3, 2024
• cockpit Red Hat Cockpit: command injection when deleting a sosreport with a crafted name CVE-2024-2947 Fix available 7.3 HighMarch 28, 2024
• cockpit Red Hat A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate... CVE-2021-3698 Fix available 7.5 HighMarch 8, 2022
• cockpit Red Hat Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to... CVE-2021-3660 Fix available 4.3 MediumSeptember 30, 2021
• cockpit Red Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope CVE-2019-11247 Fix available 5.0 MediumAugust 29, 2019
• cockpit Red Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• cockpit Red Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service CVE-2019-9512 Fix available EPSS 83.4% 7.5 HighAugust 13, 2019
• cockpit Red Hat It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly... CVE-2019-3804 Fix available 7.5 HighMarch 26, 2019
• cockpit Red Hat Privilege Escalation in Kubernetes CVE-2018-1002105 Public exploitFix available EPSS 87.0% 9.8 CriticalDecember 5, 2018
• cockpit Red Hat A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.... CVE-2018-10933 Public exploitFix available EPSS 91.8% 9.1 CriticalOctober 16, 2018
• cockpit Red Hat The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker... CVE-2017-15138 5.0 MediumAugust 13, 2018
• cockpit Red Hat A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin.... CVE-2017-12195 Fix available 6.5 MediumJuly 27, 2018
• cockpit Red Hat The OpenShift image import whitelist failed to enforce restrictions correctly when running... CVE-2017-15137 4.3 MediumJuly 16, 2018
• cockpit Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2018-1000169 Fix available 5.3 MediumApril 13, 2018