Log in Start free

Vulnerability · Published Sep 18, 2026 · Assigned by redhat

CVE-2026-91147Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

Medium 5.9

In plain English

A medium-severity security flaw in Red Hat Enterprise Linux 10 from Red Hat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.6%top 49.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the `WebService.UrlRoot` is configured and a request is made to the exact URL-root prefix without a trailing slash, `cockpit-ws` can terminate unexpectedly. This issue leads to the unavailability of the Cockpit web service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8cockpit310.10-1.el8_10ALSA-2026:94485
AlmaLinux:9cockpit356.4-1.el9_8ALSA-2026:94533
AlmaLinux:8cockpit-bridge310.10-1.el8_10ALSA-2026:94485
AlmaLinux:9cockpit-bridge356.4-1.el9_8ALSA-2026:94533
AlmaLinux:8cockpit-doc310.10-1.el8_10ALSA-2026:94485
AlmaLinux:9cockpit-doc356.4-1.el9_8ALSA-2026:94533
AlmaLinux:9cockpit-packagekit356.4-1.el9_8ALSA-2026:94533
AlmaLinux:9cockpit-storaged356.4-1.el9_8ALSA-2026:94533
AlmaLinux:8cockpit-system310.10-1.el8_10ALSA-2026:94485
AlmaLinux:9cockpit-system356.4-1.el9_8ALSA-2026:94533
AlmaLinux:8cockpit-ws310.10-1.el8_10ALSA-2026:94485
AlmaLinux:9cockpit-ws356.4-1.el9_8ALSA-2026:94533
AlmaLinux:9cockpit-ws-selinux356.4-1.el9_8ALSA-2026:94533
Debian:12cockpitno fix listedDEBIAN-CVE-2026-91147
Debian:13cockpitno fix listedDEBIAN-CVE-2026-91147
Debian:14cockpit368-1DEBIAN-CVE-2026-91147
Rocky Linux:8cockpit0:310.10-1.el8_10RLSA-2026:94485
Rocky Linux:9cockpit0:356.4-1.el9_8.rocky.0.1RLSA-2026:94533
Ubuntu:22.04:LTScockpitno fix listedUBUNTU-CVE-2026-91147
Ubuntu:24.04:LTScockpitno fix listedUBUNTU-CVE-2026-91147
Ubuntu:26.04:LTScockpitno fix listedUBUNTU-CVE-2026-91147
Ubuntu:26.10cockpitno fix listedUBUNTU-CVE-2026-91147

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat OpenShift Dev Spaces see references
Red Hat Red Hat OpenShift Dev Spaces see references
Red Hat Red Hat OpenShift Dev Spaces see references

Weakness: CWE-617 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References