CVE-2026-6626

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6626", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-19T16:43:04.982Z", "datePublished": "2026-04-20T09:45:12.067Z", "dateUpdated": "2026-04-20T15:23:47.915Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-20T09:45:12.067Z"}, "title": "Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-943", "lang": "en", "description": "Improper Neutralization of Special Elements in Data Query Logic"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-20", "lang": "en", "description": "Improper Input Validation"}]}], "affected": [{"vendor": "Cockpit-HQ", "product": "Cockpit", "versions": [{"version": "2.13.0", "status": "affected"}, {"version": "2.13.1", "status": "affected"}, {"version": "2.13.2", "status": "affected"}, {"version": "2.13.3", "status": "affected"}, {"version": "2.13.4", "status": "affected"}, {"version": "2.13.5", "status": "affected"}], "modules": ["Asset Handler/Aggregate Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-04-19T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-19T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-19T18:48:15.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Nicolas Pauferro (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/358261", "name": "VDB-358261 | Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/358261/cti", "name": "VDB-358261 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/792601", "name": "Submit #792601 | Cockpit-HQ Cockpit CMS 2.13.5 Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/NicolasPauferro/studiesofnosqli", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-20T15:23:30.707150Z", "id": "CVE-2026-6626", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T15:23:47.915Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6626", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-20T15:23:30.707150Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T15:23:39.548Z"}}], "cna": {"title": "Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection", "credits": [{"lang": "en", "type": "reporter", "value": "Nicolas Pauferro (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "Cockpit-HQ", "modules": ["Asset Handler/Aggregate Handler"], "product": "Cockpit", "versions": [{"status": "affected", "version": "2.13.0"}, {"status": "affected", "version": "2.13.1"}, {"status": "affected", "version": "2.13.2"}, {"status": "affected", "version": "2.13.3"}, {"status": "affected", "version": "2.13.4"}, {"status": "affected", "version": "2.13.5"}]}], "timeline": [{"lang": "en", "time": "2026-04-19T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-19T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-19T18:48:15.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/358261", "name": "VDB-358261 | Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/358261/cti", "name": "VDB-358261 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/792601", "name": "Submit #792601 | Cockpit-HQ Cockpit CMS 2.13.5 Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/NicolasPauferro/studiesofnosqli", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-943", "description": "Improper Neutralization of Special Elements in Data Query Logic"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "Improper Input Validation"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-20T09:45:12.067Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6626", "state": "PUBLISHED", "dateUpdated": "2026-04-20T15:23:47.915Z", "dateReserved": "2026-04-19T16:43:04.982Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-20T09:45:12.067Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Asset Handler/Aggregate Handler"], "product": "Cockpit", "vendor": "Cockpit-HQ", "versions": [{"status": "affected", "version": "2.13.0"}, {"status": "affected", "version": "2.13.1"}, {"status": "affected", "version": "2.13.2"}, {"status": "affected", "version": "2.13.3"}, {"status": "affected", "version": "2.13.4"}, {"status": "affected", "version": "2.13.5"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset Handler/Aggregate Handler. The manipulation results in improper neutralization of special elements in data query logic. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad fue detectada en Cockpit-HQ Cockpit hasta la versi\u00f3n 2.13.5. Afectada por este problema es alguna funcionalidad desconocida del componente Gestor de Activos/Gestor de Agregados. La manipulaci\u00f3n resulta en una neutralizaci\u00f3n incorrecta de elementos especiales en la l\u00f3gica de consulta de datos. Es posible lanzar el ataque remotamente. El exploit es ahora p\u00fablico y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgaci\u00f3n pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-6626", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6626", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-20T15:23:30.707150Z", "version": "2.0.3"}}]}, "published": "2026-04-20T10:16:17.943", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/NicolasPauferro/studiesofnosqli"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/792601"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/358261"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/358261/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-943"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.13.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.13.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.13.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.13.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.13.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.13.5"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Cockpit", "source": "cna", "vendor": "Cockpit-HQ"}, "product": "cockpit", "vendor": "cockpit-hq"}], "analysis": {"en": {"generated_at": "2026-04-20T11:51:17.340335+00:00", "value": {"mitigation_remediation": ["Update Cockpit\u2011HQ Cockpit to a version that includes the fix for the Asset Handler/Aggregate Handler injection flaw.", "If no patch is immediately available, restrict access to the Asset Handler and Aggregate Handler endpoints by firewall rules or network segmentation to limit exposure to trusted users and systems.", "Implement input validation and sanitization on all query parameters, ensuring that special elements are properly escaped or using parameterized queries to prevent injection.", "Apply strict access controls so that only authorized roles can invoke aggregate query functionality, reducing the attack surface."], "summary": {"action": "Patch Promptly", "impact": "Injection leading to unauthorized data access"}, "threat_synthesis": {"affected_systems": "Cockpit\u2011HQ Cockpit, versions up to 2.13.5 are affected. Any deployment that exposes the Asset Handler or Aggregate Handler functionality to external traffic is at risk.", "description_and_impact": "The vulnerability occurs in the Asset Handler/Aggregate Handler of Cockpit\u2011HQ Cockpit and is caused by improper neutralization of special elements in data query logic. The flaw allows a malicious actor to inject crafted query content when interacting with the handler, potentially influencing data retrieval or other query logic without executing arbitrary commands. The impact is limited to confidentiality and integrity of the queried data, though broader system disruption could arise if query logic misbehaves.", "risk_and_exploitability": "The CVSS score of 5.3 indicates a moderate risk. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, but the public disclosure and remote nature of the attack suggest that exploitation is feasible from outside the network. An attacker can send specially crafted queries to the vulnerable endpoint, leveraging the injection to manipulate data retrieval or execution flows. Given the moderate severity and remote exploitability, immediate attention is warranted to prevent potential compromise."}}}}, "created": "2026-04-20T11:30:05.324577+00:00", "updated": "2026-04-20T12:00:05.960916+00:00", "vendors": ["cockpit-hq", "cockpit-hq$PRODUCT$cockpit"]}