CVE-2026-91149

A flaw in Cockpit allows an unauthenticated remote attacker to trigger a denial of service by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. The service creates an unbounded number of detached threads , exhausting system resources such as memory and file d...