https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T18:50:07.964102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337286 EUVD-2026-337286 2026-10-23T18:50:08.015682+00:00 EUVD-2026-337286 https://cve.radiocsirt.org/vuln/fkie_cve-2026-38993 fkie_cve-2026-38993 2026-10-23T18:50:08.015720+00:00

Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite assets with malicious versions.

 https://cve.radiocsirt.org/vuln/ghsa-p46p-7pmj-m34f GHSA-p46p-7pmj-m34f — Cockpit is vulnerable to directory traversal 2026-10-23T18:50:08.015764+00:00

Affected: Packagist: cockpit-hq/cockpit

Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite assets with malicious versions.