CVE-2026-91148

critical

Description

Automatic update for cockpit-368-1.fc45. ##### **Changelog for cockpit** ``` * Wed Sep 23 2026 Packit <[email protected]> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10 ```

Details

Source: Mitre, NVD

Published: 2026-09-23

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical