openITCOCKPIT vulnerabilities
We track 3 vulnerabilities in openITCOCKPIT products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 14, 2026.
Latest openITCOCKPIT vulnerabilities
- 8.8 High severity
openITCOCKPIT: Improper Neutralization of Special Elements used in an OS Command
openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Community Edition prior to version 5.5.2 contains a command injection vulnerability that allows an authenticated user with permission to add or modify hosts t
- 8.8 High severity
openITCOCKPIT: Deserialization of Untrusted Data
openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contains an unsafe PHP deserialization pattern in the processing of changelog entries.
- 7.5 High severity
openITCOCKPIT: Deserialization of Untrusted Data
openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. Versions 5.3.1 and below contain an unsafe deserialization sink in the Gearman worker implementation. The worker function registered as o