CVE ID :CVE-2026-57856 Published : July 13, 2026, 11:16 p.m. | 1 hour, 17 minutes ago Description :Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-57856 - Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API

VERWANDTEARTIKEL

CVE-2026-58486 - HedgeDoc: Denial-of-service via YAML alias expansion in note frontmatter

CVE-2026-57855 - Cockpit CMS Missing Authorization in Bucket File Storage API

CVE-2026-62240 - CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

CVE-2026-62242 - Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

CVE-2026-62327 - 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats

CVE-2026-62328 - 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints