Medium severity6.1NVD Advisory· Published Aug 26, 2026· Updated Aug 31, 2026

CVE-2026-39275

Description

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Securify AI/CVE 2026 39275references
Cockpit Hq/Cockpit Hq/cockpitllm-fuzzy
Range: <=2.13.5

Patches

Vulnerability mechanics

References

github.com/Cockpit-HQ/Cockpit/commit/d70dc5059732fc97bd65aa3583cd0f88631a3c78nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000