8.0
High
CVE-2026-4802 Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui
Description
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitable remotely over the network, with an ordinary account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- Required
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | Versions not published |
Show the 25 other branches Hide the 25 other branches
References
- RHSA-2026:21390 access.redhat.com
- RHSA-2026:21392 access.redhat.com
- RHSA-2026:21394 access.redhat.com
- RHSA-2026:21395 access.redhat.com
- RHSA-2026:21468 access.redhat.com
- RHSA-2026:21515 access.redhat.com
- RHSA-2026:21516 access.redhat.com
- RHSA-2026:21647 access.redhat.com
- RHSA-2026:21676 access.redhat.com
- RHSA-2026:21700 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2451155 bugzilla.redhat.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux 10
The 1454 CVEs of Red Hat Enterprise Linux 10 →
CVE-2026-123151
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
Not rated
CVE-2026-121997
Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
8.1
High
CVE-2026-121996
Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
8.2
High
CVE-2026-121995
Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
7.5
High