Cockpit-Hq
17 CVEs across 2 Cockpit-Hq products. Browse Cockpit-Hq vulnerabilities, severities, and proof-of-concept exploits.
Cockpit-Hq products with known CVEs
Cockpit-Hq CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-58467 | High | 7.5 | 2026-07-02 | Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or ex… |
CVE-2026-23695 | Medium | 5.4 | 2026-05-15 | Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template op… |
CVE-2026-6626 | Medium | 6.3 | 2026-04-20 | A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate… |
CVE-2026-31891 | High | 7.7 | 2026-03-18 | Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is potentially affected by… |
CVE-2023-4451 | Medium | 6.1 | 2023-08-20 | Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4. |
CVE-2023-4433 | Medium | 5.4 | 2023-08-19 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4. |
CVE-2023-4432 | Medium | 6.1 | 2023-08-19 | Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4. |
CVE-2023-4422 | Medium | 4.8 | 2023-08-18 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. |
CVE-2023-4395 | Medium | 5.4 | 2023-08-17 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4. |
CVE-2023-4321 | Medium | 6.1 | 2023-08-14 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3. |
CVE-2023-4196 | Medium | 5.4 | 2023-08-06 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. |
CVE-2023-4195 | High | 8.8 | 2023-08-06 | PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3. |
CVE-2023-1313 | High | 8.8 | 2023-03-10 | Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1. |
CVE-2023-1160 | Medium | 5.5 | 2023-03-03 | Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0. |
CVE-2023-0780 | Medium | 5.4 | 2023-02-11 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev. |
CVE-2023-0759 | High | 8.8 | 2023-02-09 | Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8. |
CVE-2022-2818 | Critical | 9.8 | 2022-08-15 | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2. |
CVE-2022-2713 | Critical | 9.8 | 2022-08-08 | Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0. |