CVE-2026-4802— Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui
In-the-Wild Activity Observed github_trending · low
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any | affected |
| Red Hat | Red Hat Enterprise Linux 7 | any | affected |
| Red Hat | Red Hat Enterprise Linux 8 | any | affected |
| Red Hat | Red Hat Enterprise Linux 9 | any | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-4802
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cockpit 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cockpit是Cockpit开源的一个交互式服务器管理界面。 Cockpit存在操作系统命令注入漏洞，该漏洞源于系统日志用户界面中未清理用户控制的参数，允许远程攻击者通过特制链接注入shell元字符和命令替换，导致在受影响系统上执行任意shell命令，可能导致系统完全被破解。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | cpe:/o:redhat:enterprise_linux:10 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 | |
| Red Hat | Red Hat Enterprise Linux 8 | - | cpe:/o:redhat:enterprise_linux:8 | |
| Red Hat | Red Hat Enterprise Linux 9 | - | cpe:/o:redhat:enterprise_linux:9 |
II. Public POCs for CVE-2026-4802
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-4802
请登录查看更多情报信息。
Patch · 1Advisory · 1
- 2451155 – (CVE-2026-4802) CVE-2026-4802 cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UIissue-trackingx_refsource_REDHAT
- https://nvd.nist.gov/vuln/detail/CVE-2026-4802
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
- CVE-2026-9149
Libsolv: heap buffer overflow in libsolv repo_add_solv via n - CVE-2026-9150
Libsolv: stack-based buffer overflow in libsolv's debian met - CVE-2026-42009
Gnutls: gnutls: denial of service via dtls packet reordering - CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2026-34002
Xorg: xwayland: x.org x server: information disclosure or de
Same vendor: Red Hat
- CVE-2026-9149
Libsolv: heap buffer overflow in libsolv repo_add_solv via n - CVE-2026-9150
Libsolv: stack-based buffer overflow in libsolv's debian met - CVE-2026-9087
Keycloak: cross-session email verification proof not bound t - CVE-2026-9064
389-ds-base: 389-ds-base: unbounded ldap controls count in g - CVE-2026-7571
Keycloak: keycloak: access token disclosure and implicit flo
Same weakness: CWE-78
V. Comments for CVE-2026-4802
No comments yet