Cockpit HQ Cockpit

• CVE-2026-109379 Medium 5.3 Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check 0.3%
• CVE-2026-105217 Low 3.1 Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php 0.1%
• CVE-2026-82449 Medium 5.3 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing 0.4%
• CVE-2026-58467 High 7.5 Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php 1.7%
• CVE-2026-23695 Medium 5.4 Cockpit CMS 2.14.0 Stored XSS via Set Field Display Template 0.1%
• CVE-2026-6626 Medium 6.3 Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection 0.2%
• CVE-2026-31891 High 7.7 Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw() 0.4%