cockpit-356.2-1.el9_8.ML.1

エラータID: AXSA:2026-1266:11

Release date: 
Thursday, July 16, 2026 - 10:39
Subject: 
cockpit-356.2-1.el9_8.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

* cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI (CVE-2026-4802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-4802
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.

Solution: 

Update packages.

CVEs: 
CVE-2026-4802
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
Additional Info: 

N/A

Download: 

SRPMS
  1. cockpit-356.2-1.el9_8.ML.1.src.rpm
    MD5: 057dcaa050027386111bcd2cf3d05b7a
    SHA-256: 68c000de7b99d781446485384186f63d29e0ab11e7edb9c76e3922912410b61d
    Size: 25.50 MB

Asianux Server 9 for x86_64
  1. cockpit-356.2-1.el9_8.ML.1.x86_64.rpm
    MD5: 15d6f453d1bf23342091fb7c3f8a0a12
    SHA-256: 83103951614944691931d2dfacb8173cbb9f5c51c7f08aced7b273b1e191b6e0
    Size: 31.16 kB
  2. cockpit-bridge-356.2-1.el9_8.ML.1.noarch.rpm
    MD5: a282956486ecf84de7a598056a70258d
    SHA-256: 2bf414d8577745ebaa97c7fc34f0ab8d8ccb47a9593657902bedf5413ebbe946
    Size: 635.10 kB
  3. cockpit-doc-356.2-1.el9_8.ML.1.noarch.rpm
    MD5: 887bd99bb251029346f9fafd14cf43a8
    SHA-256: 6c7b8e18c469a597e01ab76b81e164bb1e9972a584edff4d82811c45b2f5902f
    Size: 125.30 kB
  4. cockpit-packagekit-356.2-1.el9_8.ML.1.noarch.rpm
    MD5: f05985f438f6ea7c36b6b2d674235933
    SHA-256: fd63d347d5731faab29dd72ff64ee46cb5d26e5810d2f89b2b175a393bd0b181
    Size: 939.37 kB
  5. cockpit-storaged-356.2-1.el9_8.ML.1.noarch.rpm
    MD5: 9d3f762fd7b6db132436fe15e106926d
    SHA-256: 280be771a02abbad79d7e8ef81c674079c01d8ca544f87e6969b9db0f93bc3fa
    Size: 863.04 kB
  6. cockpit-system-356.2-1.el9_8.ML.1.noarch.rpm
    MD5: 4883686d2bb78c97b23b12ac44816dd7
    SHA-256: eb20b4733e71a622bd7a50afbb097e69db1a32c1437a4067e4aa30af8ba27428
    Size: 5.13 MB
  7. cockpit-ws-356.2-1.el9_8.ML.1.x86_64.rpm
    MD5: 188bbe47c2ef1708846652267fc5e58c
    SHA-256: 3d0a485275fac984bd0542144a031072687656a9b17b0d01e39e9447d053d8d7
    Size: 1.07 MB
  8. cockpit-ws-selinux-356.2-1.el9_8.ML.1.x86_64.rpm
    MD5: b8e4cd95778dfaa8b513e2a9aa820d88
    SHA-256: a10cc66d783806d34d54869b0ccfe512cd4b921afdd2bb0a2a9bb8c69b780b93
    Size: 43.22 kB