Lucene search
K

Cockpit Vulnerable to Unrestricted Upload of File with Dangerous Type

šŸ—“ļøĀ 29 Apr 2026Ā 18:31:34Reported byĀ GitHub Advisory DatabaseTypeĀ 
github
Ā github
šŸ”—Ā github.comšŸ‘Ā 4Ā Views

Cockpit 2.13.5 and earlier vulnerable to uploading dangerous files via file type filter, enabling code execution.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-38991
29 Apr 202600:00
–attackerkb
Circl
CVE-2026-38991
30 Apr 202620:00
–circl
CNNVD
Cockpit ä»£ē é—®é¢˜ę¼ę“ž
29 Apr 202600:00
–cnnvd
CVE
CVE-2026-38991
29 Apr 202600:00
–cve
Cvelist
CVE-2026-38991
29 Apr 202600:00
–cvelist
EUVD
EUVD-2026-26242
29 Apr 202600:00
–euvd
NVD
CVE-2026-38991
29 Apr 202616:16
–nvd
OSV
GHSA-J2RX-4JG9-79MW Cockpit Vulnerable to Unrestricted Upload of File with Dangerous Type
29 Apr 202618:31
–osv
Positive Technologies
PT-2026-35934
29 Apr 202600:00
–ptsecurity
RedhatCVE
CVE-2026-38991
5 Jun 202619:49
–redhatcve
Rows per page
Vulners
Node
cockpit-hqcockpitRange<2.14.0composer

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 May 2026 23:11Current
6Medium risk
Vulners AI Score6
CVSS 3.18.8
EPSS0.00035
SSVC
4