https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-31891.htmlhttps://patchthecve.com/cve/CVE-2026-31891.htmlWed, 17 Jun 2026 10:34:42 +0000HIGH 7.7: Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is potentially affected by a a SQL Injection vulnerability in the MongoLite Aggregation Optimizer. Any deployment where the `/api/content/aggregate/{model}` endpoint ishttps://patchthecve.com/cve/CVE-2024-6656.htmlhttps://patchthecve.com/cve/CVE-2024-6656.htmlWed, 17 Jun 2026 08:18:26 +0000CRITICAL 9.8: Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable. This issue affects Cockpit Software: before v2.13.https://patchthecve.com/cve/CVE-2024-1272.htmlhttps://patchthecve.com/cve/CVE-2024-1272.htmlWed, 17 Jun 2026 07:03:51 +0000HIGH 7.5: Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allows Retrieve Embedded Sensitive Data. This issue affects Cockpit Software: before v0.251.1.https://patchthecve.com/cve/CVE-2024-4825.htmlhttps://patchthecve.com/cve/CVE-2024-4825.htmlWed, 17 Jun 2026 08:03:00 +0000CRITICAL 9.8: A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.https://patchthecve.com/cve/CVE-2024-2001.htmlhttps://patchthecve.com/cve/CVE-2024-2001.htmlWed, 17 Jun 2026 07:23:32 +0000MEDIUM 5.5: A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.