TI-2026-27187 CVE-2026-34965 · GHSA-rh9x-q9jp-fgcf
Cockpit CMS Authenticated Remote Code Execution via Collections
Priority HIGH 73
Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary…