CVE-2026-39275

Published: Ago 26, 2026 Last Modified: Ago 26, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components.

https://github.com/Securify-AI/CVE-2026-39275
https://github.com/Securify-AI/CVE-2026-39275