PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[EN] CVE-2026-4802: Command execution on Cockpit

yokai.hakaisecurity.io | vulnerability | CVE-2026-4802 | #rce | #vulnerability-research | #research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A command injection vulnerability has been identified in Cockpit, discovered by Hakai’s Research team. The flaw allows an authenticated user, even without administrative privileges, to inject operating system commands through the system logs viewing feature, achieving remote code execution on the server. About Cockpit Cockpit is a web-based Linux server administration tool developed by Red […]
CVE
CVE-2026-4802
Published
Collected

Related coverage

vulnerability · yokai.hakaisecurity.io
[PT-BR] CVE-2026-4802: Command execution on Cockpit
Foi identificada uma vulnerabilidade de injeção de comandos no Cockpit, descoberta pelo time de Research da Hakai. A falha permite que um usuário autenticado, mesmo sem privilégios administrativos, injete comandos do sistema operacional através da funcionalidade de visualização de logs do sistema, obtendo execução remota de código no servidor. Sobre o Cockpit O Cockpit é […]
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · yokai.hakaisecurity.io
OsCommerce v4 RCE: Unveiling the file upload bypass threat
In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload restrictions. I’ve always enjoyed testing file upload bypass techniques in my assessments. Vulnerabilities Identified in OsCommerce Version 4 The CVE-2024-22724 was assigned to the discovery of this vulnerability. The issue […]
Back