cbcvebase.

Cockpit Cms vulnerabilities

1 known vulnerability affecting cockpit/cockpit_cms.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-34965P2HIGHCVSS 8.8≤ 494765e2026-04-29
CVE-2026-34965 [HIGH] CWE-94 CVE-2026-34965: Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collection Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules parameters. Attackers can inject malicious PHP code through rule parameters which is written directly
nvd
Cockpit Cms vulnerabilities | cvebase