CVE-2026-38991

Cockpit versions 2.13.5 and earlier are vulnerable to a misconfiguration in the Bucket component's _isFileTypeAllowed function. A specially crafted filename can bypass extension filters, allowing an authenticated attacker to rename arbitrary files to include a .php extension. This can result in a...