Login Request a demo
CO
Product
Cockpit
by Agentejo · last CVE Mar 18, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 8High 7Medium 16Low 0
Severity
All severities31Critical8High7Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cockpit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31891
6.5
0%
Mar 18
Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()
Affected: before 2.13.5
CVE-2025-7053
6.1
0%
Jul 4
Cockpit save cross site scripting
Affected: through 2.11.3
CVE-2023-41564
6.1
1%
Sep 8
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file
Affected: 2.6.3
CVE-2023-4451
6.1
2%
Aug 20
Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Affected: through 2.6.3
CVE-2023-4432
6.1
1%
Aug 19
Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Affected: through 2.6.3
CVE-2023-4321
6.1
1%
Aug 14
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.4.3
CVE-2021-32857
6.1
1%
Feb 20
Cockpit vulnerable to Cross-site Scripting
Affected: through 0.12.2
CVE-2020-14408
6.1
3%
Jun 17
An issue was discovered in Agentejo Cockpit 0.10.2
Affected: 0.10.2
CVE-2018-15538
6.1
1%
Oct 15
Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities
Affected: All versions, or not specified
CVE-2023-1160
5.5
0%
Mar 3
Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit
Affected: through 2.3.9
CVE-2024-2001
5.4
0%
Feb 29
Cross-Site Scripting vulnerability in Cockpit CMS
Affected: 2.7.0
CVE-2023-4433
5.4
1%
Aug 19
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: through 2.6.3
CVE-2023-4395
5.4
1%
Aug 17
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.4
CVE-2023-4196
5.4
0%
Aug 6
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.3
CVE-2023-0780
5.4
0%
Feb 11
Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Affected: before 2.3.9
CVE-2023-4422
4.8
1%
Aug 18
Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Affected: before 2.6.3
Showing 16