Cockpit CMS vulnerabilities

1 known vulnerability in Cockpit CMS from Cockpit. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Cockpit CMS: Improper Control of Generation of Code

  CVE-2026-34965Apr 29, 2026Cockpit

  Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules paramete