CVE-2026-4802 | BDVDB-2026-331908 Detail
Red HatRed Hat Enterprise Linux 10
Description#
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
References#
- https://access.redhat.com/errata/RHSA-2026:21390
- https://access.redhat.com/errata/RHSA-2026:21392
- https://access.redhat.com/errata/RHSA-2026:21394
- https://access.redhat.com/errata/RHSA-2026:21395
- https://access.redhat.com/errata/RHSA-2026:21468
- https://access.redhat.com/errata/RHSA-2026:21515
- https://access.redhat.com/errata/RHSA-2026:21516
- https://access.redhat.com/errata/RHSA-2026:21647
- https://access.redhat.com/errata/RHSA-2026:21676
- https://access.redhat.com/errata/RHSA-2026:21700
- https://access.redhat.com/security/cve/CVE-2026-4802
- https://bugzilla.redhat.com/show_bug.cgi?id=2451155
- https://github.com/cockpit-project/cockpit/blob/e204cd130/pkg/systemd/logsJournal.jsx#L206-L210
- http://www.openwall.com/lists/oss-security/2026/05/20/19
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4802.json
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.