---
id: 5123
title: "[CVE-2020-35846] From 0 to RCE: Cockpit CMS"
cve: CVE-2020-35846
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/rce-cockpit-cms/"
published_at: "2021-04-13T12:48:00Z"
tags: ["rce", "vulnerability-research", "cve", "nosql-injection", "cms"]
phying_url: "https://phying.com/item/5123"
lang: en
---

# [CVE-2020-35846] From 0 to RCE: Cockpit CMS

## Summary

A vulnerability chain in open-source CMS Cockpit: unauthenticated NoSQL injections (CVE-2020-35846) allow username extraction through blind $eq and $regex techniques, escalating to take over any user account and finally to remote code execution.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **CVE:** CVE-2020-35846
- **Published:** 2021-04-13T12:48:00Z
- **Original:** https://swarm.ptsecurity.com/rce-cockpit-cms/
- **Phying News:** https://phying.com/item/5123