CVE-2026-38993mediumCWE-22

CVE-2026-38993

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.8%

probabilidade de exploração

0.8%top 44% das CVEs

exploração observada

nãonenhuma fonte reporta

Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite assets with malicious versions.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Produtos afetados

n/a · n/a

Referências

https://access.redhat.com/security/cve/CVE-2026-38993 https://bugzilla.redhat.com/show_bug.cgi?id=2463843 https://felsec.com/posts/cockpit-cms-2.13.5-multi-vulns/https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.14.0 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-38993.json