What’s Vulnerable › Products

Cockpit HQ Cockpit CMS vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Cockpit HQ Cockpit CMS version is affected

Latest Cockpit HQ Cockpit CMS vulnerabilities

• CVE-2026-73680 — Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename (CVSS 8.8)
• CVE-2026-57856 — Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API (CVSS 8.8)
• CVE-2026-57855 — Cockpit CMS Missing Authorization in Bucket File Storage API (CVSS 8.8)