Cockpit Cms vulnerabilities
2 known vulnerabilities affecting cockpit_cms/cockpit_cms.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-72557P2HIGHCVSS 8.8≤ 2.6.02026-08-11
CVE-2026-72557 [HIGH] CWE-434 CVE-2026-72557: An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload
An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The allowed_uploads configuration defaults to wildcard (*) and uploaded files are stored in a web-accessible directory. An attacker with any authenticated account can upload a PH
nvd
CVE-2024-2001P4MEDIUMCVSS 5.4v2.7.02024-02-29
CVE-2024-2001 [MEDIUM] CWE-79 CVE-2024-2001: A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability coul
A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.
nvd