CH
Vendor security profile
Cockpit HQ
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS6.0
12-month vulnerability rate
0
0
0
0
0
0
1
0
0
2
0
2
CVE KEV
CVE severity distribution
5toplam CVE
High1 (20%)
Medium3 (60%)
Low1 (20%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.9
CVE-2026-109379
Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check
CH
Patch verifiedEPSS %0
2.3
CVE-2026-105217
Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php
CH
Patch verifiedEPSS %0
6.9
CVE-2026-82449
Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
CH
Patch verifiedEPSS %0
8.8
CVE-2026-73680
Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename
CH
Patch verifiedEPSS %3
5.1
CVE-2026-23695
Cockpit CMS 2.14.0 Stored XSS via Set Field Display Template
CH
Patch verifiedEPSS %0