The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-7384 advisory.

    [344-2.0.1]
    - Storage: Enable btrfs support [Orabug: 37464632]
    - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
    - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
    - Remove duplicate reference to server in cockpit [Orabug: 34030494]
    - Update documentation links [Orabug: 30271413], [Orabug: 32013095],       [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
    - Update spec file for new release

    [344]
    - Remove recommends on subscription-manager-cockpit if applicable

    * Fri Mar 27 2026 Jelle van der Waa <jvanderw@redhat.com - 344-2
    - ws: be more explicit when handling hostnames on cli (CVE-2026-4631)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:7383 advisory.

    * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ea792bf240 advisory.

    Automatic update for cockpit-360.1-1.fc44.

    ##### **Changelog for cockpit**

    ```
    * Tue Apr 14 2026 Packit <hello@packit.dev> - 360.1-1
    - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
    - Remove Mount action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)

    * Wed Apr 08 2026 Packit <hello@packit.dev> - 360-1
    - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
    - ws: support loading a custom login page
    - Translation updates

    ```



    ----

    Automatic update for cockpit-360-1.fc44.

    ##### **Changelog for cockpit**

    ```
    * Wed Apr 08 2026 Packit <hello@packit.dev> - 360-1
    - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
    - ws: support loading a custom login page
    - Translation updates

    ```


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-473:03 advisory.

    * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the     SSH client without validation or sanitization. An attacker with network access to the Cockpit web service     can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell     commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs     during the authentication flow before any credential verification takes place, meaning no login is     required to exploit the vulnerability. (CVE-2026-4631)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21399-1 advisory.

    Security issues fixed:

    - CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of     methods from       global prototypes (bsc#1257325).
    - CVE-2026-4631: SSH command-line argument injection can lead to unauthenticated remote code execution     (bsc#1261829).
    - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory     consumption and       may crash a Node.js process (bsc#1257836 bsc#1257838 bsc#1257840).
    - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a     literal character       that doesn't appear in the test string (bsc#1258637 bsc#1258640 bsc#1258641).
    - CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential     backtracking       complexity and a ReDoS (bsc#1259010 bsc#1259013 bsc#1259015).

    Non security issues fixed:

    - cockpit webUI - 'Software updates - install all updates' got an unexpected internal error (bsc#1259210).
    - cockpit-machines does not work out of the box, missing libvirt daemon (bsc#1236149).

    Changes for cockpit:

    - Update to 364.

    - Update to 361 (jsc#PED-15706/jsc#CPT-183):

     * Remove all Mount actions in Anaconda mode
     * Dependency updates

    - Update to 360:
     * ws: be more explicit when handling hostnames on cli bsc#1261829/CVE-2026-4631
     * ws: support loading a custom login page

    - Update to 358:

     * Networking: Add Wi-Fi support
     * Cockpit Client updated to GTK 4
     * Bugfixes and translation updates

    - Update to 357:

     * lib: Use browser context menu on shift
     * bridge: support Python 3.14 on old kernels (RHEL 8)

    - Update to 356:

     * systemd: Allow editing timers created by Cockpit
     * Convert license headers to SPDX format

    - Update to 355:

     * ws: Remove obsolete pam_cockpit_cert module
     * shell: add StartTransientUnit as a sudo alternative

    Changes for cockpit-machines:

    - Update to 354.

    - Update to 352:

     - Improvements to the Add disk and Create Volume dialogs.

    - Update suse_version requirement to function with the planned bump (jsc#PED-15820).
    - Drop explict dependency on libvirt (bsc#1258040, bsc#1236149).

    - Update to 348:

     * Translation updates
     * Convert license headers to SPDX format
     * Now requires cockpit-devel 356 due to the replacement of xterm/addon-canvas with xterm/addon-webgl

    - Update to 347:
     * Bug fixes and translation updates

    - Fix esbuild for ppc64le (bsc#1257698).

    Changes for cockpit-packages:

    - Update to version 5:

     * Support transactional systems
     * Improve error/success messages
     * Translation updates

    - Patch esbuild to use native runtime on ppc64 (bsc#1257698).

    Changes for cockpit-podman:

    - Update to 128.
    - Fix esbuild for ppc64le (bsc#1257698).

    Changes for cockpit-repos:

    - Update to 4.8.
    - Patch esbuild to use native runtime on ppc64 (bsc#1257698).

    Changes for cockpit-subscriptions:

    - Update to version 16.2 (bsc#1257033).
    - Patch esbuild to use native runtime on ppc64 (bsc#1257698).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
307039	Oracle Linux 9 : cockpit: / Unauthenticated / remote / code / execution / due / to / SSH / command-line / argument / injection / (CRITICAL) (ELSA-2026-7384)	Nessus	Oracle Linux Local Security Checks	2026/4/17	2026/4/17	critical
306521	AlmaLinux 10 : cockpitUnauthenticated remote code execution due to SSH command-line argument injection (Critical) (ALSA-2026:7383)	Nessus	Alma Linux Local Security Checks	2026/4/15	2026/4/15	critical
306849	Fedora 44 : cockpit (2026-ea792bf240)	Nessus	Fedora Local Security Checks	2026/4/16	2026/4/16	critical
307681	MiracleLinux 9 : cockpit-344-2.el9_7.ML.1 (AXSA:2026-473:03)	Nessus	Miracle Linux Local Security Checks	2026/4/21	2026/4/21	critical
305219	Linux Distros Unpatched Vulnerability : CVE-2026-4631	Nessus	Misc.	2026/4/7	2026/7/31	critical
329307	openSUSE 16: cockpit / cockpit-bridge / cockpit-devel / cockpit-firewalld / etc (openSUSE-SU-2026:21399-1)	Nessus	SuSE Local Security Checks	2026/7/24	2026/7/24	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical