Сообщество свободного программного обеспечения cockpit

Name: Сообщество свободного программного обеспечения cockpit
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical2high3medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-4631US	—	15.5% (97th)	Exploit	no fix	2026-04-07	≤ 360
CVE-2025-1025US	—	18.9% (97th)	—	no fix	2025-02-05	≤ 2.4.1
CVE-2019-3804US	high7.5	4.86% (92nd)	—	no fix	2019-03-26	≤ 184
CVE-2020-35850US	medium6.5	1.66% (77th)	—	no fix	2020-12-30	≤ 234
CVE-2021-3660US	medium4.3	1.26% (69th)	—	no fix	2022-03-10	—
CVE-2024-2947US	—	1.19% (68th)	—	no fix	2024-03-28	≤ 270
CVE-2023-4195US	high8.8	1.05% (64th)	—	no fix	2023-08-06	≤ 2.6.2
CVE-2023-4196US	medium5.4	0.47% (41st)	—	no fix	2023-08-06	≤ 2.6.2
CVE-2024-6126US	—	0.28% (20th)	—	no fix	2024-07-03	≤ 195-12

The flaw types (CWEs) most of these CVEs share.

CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.