8

CVE-2026-4802: Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui

Awaiting analysis
AliasesRHSA-2026:21390RHSA-2026:21392RHSA-2026:21394
Published 11-05-2026Last modified 15-07-2026

Vulnerability summary

CVE-2026-4802 is a high (CVSS 8.0) vulnerability in cockpit. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 63.3% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
8.0/10
010
High · v3.1 (CVE.org)
EPSS score
1.02%
0%100%
Low · -0.17 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 4
MGASA-2026-0175OPENSUSE-SU-2026:21399-1SUSE-SU-2026:22770-1SUSE-SU-2026:22837-1SUSE-SU-2026:2363-1

Timeline

  1. 11-05-2026
    PublishedVulnerability first disclosed.
  2. 15-07-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.02%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

Decrease -0.17 pp

From 1.19% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat11 products
  • cockpit< 0:310.8-1.el8_10 | < 0:334.2-1.el10_0 | < 0:334.3-1.el9_6 | < 0:286.3-1.el9_2 | < 0:264.3-1.el9_0 | < 0:356.2-1.el9_8 | < 0:286.2-1.el8_8 | < 0:264.3-1.el8_6 | < 0:311.3-1.el9_4 | < 0:356.2-1.el10_2
  • cockpit-bridge< 0:310.8-1.el8_10 | < 0:334.2-1.el10_0 | < 0:334.3-1.el9_6 | < 0:286.3-1.el9_2 | < 0:264.3-1.el9_0 | < 0:356.2-1.el9_8 | < 0:286.2-1.el8_8 | < 0:264.3-1.el8_6 | < 0:311.3-1.el9_4 | < 0:356.2-1.el10_2
  • cockpit-debuginfo< 0:310.8-1.el8_10 | < 0:334.2-1.el10_0 | < 0:334.3-1.el9_6 | < 0:286.3-1.el9_2 | < 0:264.3-1.el9_0 | < 0:356.2-1.el9_8 | < 0:286.2-1.el8_8 | < 0:264.3-1.el8_6 | < 0:311.3-1.el9_4 | < 0:356.2-1.el10_2
  • cockpit-debugsource< 0:310.8-1.el8_10 | < 0:334.2-1.el10_0 | < 0:334.3-1.el9_6 | < 0:286.3-1.el9_2 | < 0:264.3-1.el9_0 | < 0:356.2-1.el9_8 | < 0:286.2-1.el8_8 | < 0:264.3-1.el8_6 | < 0:311.3-1.el9_4 | < 0:356.2-1.el10_2
  • cockpit-doc< 0:310.8-1.el8_10 | < 0:334.2-1.el10_0 | < 0:334.3-1.el9_6 | < 0:286.3-1.el9_2 | < 0:264.3-1.el9_0 | < 0:356.2-1.el9_8 | < 0:286.2-1.el8_8 | < 0:264.3-1.el8_6 | < 0:311.3-1.el9_4 | < 0:356.2-1.el10_2
Opensuse2 products
  • cockpit&distro=openSUSE Leap 16.0< 354-160000.4.1
  • cockpit&distro=openSUSE Tumbleweed< 361-1.1
Debian1 product
  • cockpitAll versions (No fix recorded) | < 337-1+deb13u2 | < 362-1
Ubuntu1 product
  • cockpitAll versions (No fix recorded)

4 vendors · 15 products

References

34 links
Show all 34 references