Security Advisory

CVE-2026-39275

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-26 00:00:00

Last updated 2026-08-31 20:09:04

Assigner mitre

CVSS score 6.1

State PUBLISHED

Description

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components

← Browse all CVEs View on cve.org ↗