What’s Vulnerable › Products

openITCOCKPIT vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your openITCOCKPIT version is affected

Latest openITCOCKPIT vulnerabilities

• CVE-2026-24893 — openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansion (CVSS 8.8)
• CVE-2026-24892 — openITCOCKPIT has Unsafe Deserialization in openITCOCKPIT Changelog Handling (CVSS 8.8)
• CVE-2026-24891 — openITCOCKPIT has Unsafe PHP Deserialization in Gearman Worker Allowing Conditional Object Injection (CVSS 7.5)
• CVE-2023-3520 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit (CVSS 4.6)
• CVE-2023-36663 — (CVSS 8.8)
• CVE-2023-3218 — Race Condition within a Thread in it-novum/openitcockpit (CVSS 4.4)
• CVE-2020-10788 — (CVSS 9.1)
• CVE-2020-10791 — (CVSS 6.5)
• CVE-2020-10790 — (CVSS 5.4)
• CVE-2020-10789 — (CVSS 9.8)
• CVE-2020-10792 — (CVSS 7.5)
• CVE-2019-10227 — (CVSS 6.1)
• CVE-2019-15494 — (CVSS 9.8)
• CVE-2019-15493 — (CVSS 7.5)
• CVE-2019-15492 — (CVSS 6.1)
• CVE-2019-15491 — (CVSS 8.8)
• CVE-2019-15490 — (CVSS 9.8)