Description
Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an extension filter. This allows an authenticated attacker to rename arbitrary files with the .php file extension enabling arbitrary code to be executed on the underlying server.
INFO
Published Date :
2026-04-29T00:00:00.000Z
Last Modified :
2026-04-29T20:23:41.211Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2026-38991 vulnerability.
| Vendors | Products |
|---|---|
| Cockpit-hq |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-38991.
