Cockpit-Hq Cockpit Cms
3 CVEs affecting Cockpit-Hq Cockpit Cms. Latest disclosed: 2026-08-14. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73680 | High | 8.8 | 2026-08-14 | Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload p… |
CVE-2026-57856 | High | 8.8 | 2026-07-13 | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets… |
CVE-2026-57855 | High | 8.8 | 2026-07-13 | Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/… |