Log in Start free

Cockpit HQ

Products

ProductCVEsExploitedLatest
cockpit-hq/cockpit14–Aug 20, 2023
Cockpit7–Oct 12, 2026
Cockpit CMS3–Aug 14, 2026

Exploited and recent CVEs

  • CVE-2026-109379 Medium 5.3 Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check 0.3%
  • CVE-2026-105217 Low 3.1 Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php 0.1%
  • CVE-2026-82449 Medium 5.3 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing 0.4%
  • CVE-2026-73680 High 8.8 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename 2.8%
  • CVE-2026-57856 High 8.8 Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API 0.5%
  • CVE-2026-57855 High 8.8 Cockpit CMS Missing Authorization in Bucket File Storage API 0.5%
  • CVE-2026-58467 High 7.5 Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php 1.7%
  • CVE-2026-23695 Medium 5.4 Cockpit CMS 2.14.0 Stored XSS via Set Field Display Template 0.1%
  • CVE-2026-6626 Medium 6.3 Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection 0.2%
  • CVE-2026-31891 High 7.7 Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw() 0.4%
  • CVE-2023-4451 Medium 6.1 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit 2.5%
  • CVE-2023-4433 High 8.3 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit 0.6%
  • CVE-2023-4432 High 8.3 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit 0.6%
  • CVE-2023-4422 Medium 6.8 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit 0.6%
  • CVE-2023-4395 High 8.1 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit 0.6%
  • CVE-2023-4321 High 8.3 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit 0.6%
  • CVE-2023-4196 High 8.3 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit 0.5%
  • CVE-2023-4195 Critical 9.9 PHP Remote File Inclusion in cockpit-hq/cockpit 1.1%
  • CVE-2023-1313 High 7.2 Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit 1.0%
  • CVE-2023-1160 Medium 4.0 Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit 0.3%
  • CVE-2023-0780 Medium 4.0 Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit 0.4%
  • CVE-2023-0759 Medium 5.3 Privilege Chaining in cockpit-hq/cockpit 0.3%
  • CVE-2022-2818 Critical 9.8 Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit 1.7%
  • CVE-2022-2713 High 8.6 Insufficient Session Expiration in cockpit-hq/cockpit 1.3%