Cockpit CMS vulnerabilities
We track 1 vulnerability in Cockpit CMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Cockpit CMS vulnerabilities
- 8.8 High severity
Cockpit CMS: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The allowed_uploads configuration defaults to wildcard (*) and uploaded files are st