Login Request a demo
CO
Product
Cockpit
by Agentejo · last CVE Mar 18, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 8High 7Medium 16Low 0
Severity
All severities31Critical8High7Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cockpit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4195
8.8
1%
Aug 6
PHP Remote File Inclusion in cockpit-hq/cockpit
Affected: before 2.6.3
CVE-2023-37650
8.8
1%
Jul 20
A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands
Affected: through 2.5.2
CVE-2023-1313
8.8
1%
Mar 10
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1
Affected: through 2.4.0
CVE-2023-0759
8.8
0%
Feb 9
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8
Affected: before 2.3.8
CVE-2022-2818
8.8
2%
Aug 15
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2
Affected: before 2.2.2
CVE-2018-15539
8.8
1%
Oct 15
Agentejo Cockpit lacks an anti-CSRF protection mechanism
Affected: All versions, or not specified
CVE-2023-37649
7.5
1%
Jul 20
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data
Affected: through 2.5.2
Showing 7