CVE-2026-39275
Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components.
- Affected products
- Cockpit Cms
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 0.3% (17th percentile)
- Weakness
- CWE-79
- NVD status
- Received
- Published
- 2026-08-26
CVE-2026-39275 at NVD
3 known exploits for CVE-2026-39275
Proof-of-concept code and exploit modules indexed by Sploitus