CVE-2026-34965

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-34965

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34965.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-34965

Published

2026-04-29T19:50:01Z

Modified

2026-10-28T02:31:02Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Cockpit CMS Authenticated Remote Code Execution via Collections

Details

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules parameters. Attackers can inject malicious PHP code through rule parameters which is written directly to server-side PHP files and executed via include() to achieve arbitrary command execution on the underlying server.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-94"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34965.json"
}

References

Affected packages

Git / github.com/agentejo/cockpit

Affected ranges

Type

GIT

Repo

https://github.com/agentejo/cockpit

Events

Introduced

Last Affected

494765e

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "494765e"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34965.json"