[ Vendor · 2 CVEs ]
cockpit-hq
CVEs affecting cockpit-hq published in the last 30 days, plus any cockpit-hq CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109379 | 12 Oct 2026 | CVSS 5.3 | cockpit-hq cockpitCockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an… | |
| CVE-2026-105217 | 4 Oct 2026 | CVSS 3.1 | cockpit-hq cockpitCockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to… |