cockpit_cms vulnerabilities

CVEs whose affected-version data names the cockpit_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73680High· 8.8

1mo ago

Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell…

▾ TwilightCockpit HQ · Cockpit CMSEPSS 1.5%via CVEORG