CVE-2026-73680
Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename
CVSS score
8.8
EPSS probability
%2.8
Risk score
0.2
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.9
CVE-2026-82449
Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
CH
Patch verifiedEPSS %0
6.9
CVE-2026-109379
Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check
CH
Patch verifiedEPSS %0
5.1
CVE-2026-23695
Cockpit CMS 2.14.0 Stored XSS via Set Field Display Template
CH
Patch verifiedEPSS %0
2.3
CVE-2026-105217
Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php
CH
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-73680"