Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-6626

Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cockpit-HQ Cockpit

  • 2.13.0affected
  • 2.13.1affected
  • 2.13.2affected
  • 2.13.3affected
  • 2.13.4affected
  • 2.13.5affected

References