Red Hat Security Advisory

RHSA-2026:94533

cockpit security update

Released 2026-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) cockpit-packagekit-356.4-1.el9_8, cockpit-storaged-356.4-1.el9_8
Red Hat Enterprise Linux BaseOS (v. 9) cockpit-356.4-1.el9_8, cockpit-bridge-356.4-1.el9_8, cockpit-doc-356.4-1.el9_8 +3

TI-2026-61908 CVE-2026-91147 · GHSA-cj5v-4j3m-m6j5

MEDIUM 60

A flaw was found in `cockpit-ws`.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00641 Published 2026-09-18 Partial fix · 310.10-1.el8_10, 356.4-1.el9_8 CWE-617

TI-2026-61909 CVE-2026-91149 · GHSA-3m8q-36jp-wgm3

MEDIUM 40

A flaw was found in Cockpit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00567 Published 2026-09-18 Partial fix · 356.4-1.el9_8 CWE-770

TI-2026-53340 CVE-2026-76235 · GHSA-hwfh-3wjq-8p68

MEDIUM 40

A memory leak flaw was found in cockpit-ws.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-08-19 Partial fix · 310.10-1.el8_10, 356.4-1.el9_8 CWE-401