https://seclists.org/oss-sec/2026/q2/633: CVE-2026-4802 [cockpit] Arbitrary code execution in the logs page via a specially crafted link
Published May 20, 2026
·Updated
Affected Software
1 affected component
Cockpit project Cockpit
Frequently Asked Questions
1
What user interaction is implicated in exploitation?
The issue is triggered through a specially crafted link in the logs page. The provided information does not state whether additional authentication or privileges are required.
2
Are affected versions, fixes, or mitigations identified?
No affected version range, fixed version, workaround, or mitigation is included in the provided advisory information.