CVE-2026-92747

creationtimestamp| type| source ---|---|--- 2026-09-27 20:10:17+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117344817424516659 2026-09-27 20:30:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mwjncgm4tg2i...

CVE-2026-92747

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...