Login Request a demo
CO
Product
cockpit
by cockpit-hq · last CVE Oct 12, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 2Medium 12Low 1
Severity
All severities15Critical0High2Medium12Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cockpit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31891
6.5
0%
Mar 18
Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()
Affected: < 2.13.5
CVE-2026-6626
6.3
0%
Apr 20
Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection
Affected: 2.13.0; 2.13.1; 2.13.2; 2.13.3; 2.13.4; 2.13.5
CVE-2023-4451
6.1
2%
Aug 20
Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Affected: before 2.6.4
CVE-2023-4432
6.1
1%
Aug 19
Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Affected: before 2.6.4
CVE-2023-4321
6.1
1%
Aug 14
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.4.3
CVE-2026-23695
5.4
0%
May 15
Cockpit CMS 2.14.0 Stored XSS via Set Field Display Template
Affected: through 2.14.0
CVE-2023-4433
5.4
1%
Aug 19
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.4
CVE-2023-4395
5.4
1%
Aug 17
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.4
CVE-2023-4196
5.4
0%
Aug 6
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.3
CVE-2026-109379
5.3
0%
Oct 12
Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check
Affected: 2.14.1 through 2.14.1
CVE-2026-82449
5.3
0%
Aug 29
Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
Affected: before 2.14.1
CVE-2023-4422
4.8
1%
Aug 18
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.3
Showing 12