PatchTheCVEcockpit vulnerabilities and fixes
Recent CVEs affecting cockpit, with upgrade or downgrade steps. 5 tracked.
cockpit has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-18. Highest priority: CVE-2024-4825 (score 53/100).
- CVE-2026-31891 HIGH 7.7 UPGRADE Cockpit is a headless content management system
- CVE-2024-6656 CRITICAL 9.8 UPGRADE Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Str
- CVE-2024-4825 CRITICAL 9.8 DOWNGRADE A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload i
- CVE-2024-2001 MEDIUM 5.5 DOWNGRADE A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0
- CVE-2024-1272 HIGH 7.5 UPGRADE Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allow
FAQ
How do I fix cockpit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cockpit being exploited right now?
None of the tracked cockpit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cockpit CVE should I patch first?
CVE-2024-4825 currently ranks highest (53/100): A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload i.