CVEvulnerability
CVE-2026-38993
6.5 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-04-29
- Last modified
- 2026-07-15
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-22
Description
Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite assets with malicious versions.
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://felsec.com/posts/cockpit-cms-2.13.5-multi-vulns/ felsec.com
- https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.14.0 github.com
- https://access.redhat.com/security/cve/CVE-2026-38993 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2463843 bugzilla.redhat.com
- https://felsec.com/posts/cockpit-cms-2.13.5-multi-vulns/ felsec.com
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-38993.json security.access.redhat.com