A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-storagedUpgrade cockpit-systemUpgrade cockpit-packagekitUpgrade cockpit-wsUpgrade cockpit-ws-selinuxUpgrade cockpit-docUpgrade cockpitUpgrade cockpit-bridge | May 28, 2026 | May 27, 2026 |
| Debian | — | Upgrade cockpit | Aug 30, 2026 | Aug 30, 2026 |
| Oracle_linux | — | Upgrade cockpit-systemUpgrade cockpit-wsUpgrade cockpit-docUpgrade cockpitUpgrade cockpit-bridge | May 29, 2026 | May 11, 2026 |
| Redhat_linux | — | Upgrade cockpit-systemUpgrade cockpit-ws-selinuxUpgrade cockpit-packagekitUpgrade cockpit-storagedUpgrade cockpit-debuginfoUpgrade cockpit-docUpgrade cockpit-debugsourceUpgrade cockpit-bridgeUpgrade cockpitUpgrade cockpit-pcpUpgrade cockpit-ws | Jun 3, 2026 | May 11, 2026 |
| Rocky_linux | — | Upgrade cockpit-ws-selinuxUpgrade cockpit-debuginfoUpgrade cockpit-debugsourceUpgrade cockpit-bridgeUpgrade cockpitUpgrade cockpit-ws | Jun 1, 2026 | May 29, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub