RCE in Red Hat Enterprise Linux 10
CVE-2026-4802
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.012 (67.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 67th percentile — 67.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.012 · change: +0.002
Affected products
- Red Hat Enterprise Linux 10 — versions 0:356.2-1.el10_2
- Red Hat Enterprise Linux 10.0 Extended Update Support — versions 0:334.2-1.el10_0
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8 — versions 0:310.8-1.el8_10
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — versions 0:264.3-1.el8_6
- Red Hat Enterprise Linux 8.6 Telecommunications Update Service — versions 0:264.3-1.el8_6
- Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions — versions 0:264.3-1.el8_6
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service — versions 0:286.2-1.el8_8
- Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions — versions 0:286.2-1.el8_8
- Red Hat Enterprise Linux 9 — versions 0:356.2-1.el9_8
Weakness classification (CWE)
Public proof-of-concept exploits
References
- access.redhat.com/security/cve/CVE-2026-4802 (vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (issue-tracking)
- github.com/cockpit-project/cockpit/blob/e204cd130/pkg/systemd/logsJournal.jsx
- af854a3a-2127-422b-91ae-364da2661108
- access.redhat.com/errata/RHSA-2026:21390 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:21394 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:21468 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:21515 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:21395 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:21516 (vendor-advisory)
Frequently asked questions
- What is CVE-2026-4802?
- CVE-2026-4802 is a high-severity vulnerability in Red Hat Enterprise Linux 10, classified under OS Command Injection. CVSS score: 8.0/10. Published 2026-05-11.
- How severe is CVE-2026-4802?
- High severity. CVSS v3 base score is 8.0 out of 10.
- Is CVE-2026-4802 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.