Known vulnerabilities in cockpit-image-builder (Red Hat package)

Vendor: Red Hat Inc.
Software: cockpit-image-builder (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:cockpit-image-builder_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cockpit-image-builder (Red Hat package) cockpit-image-builder (Red Hat package) is affected by 6 known vulnerabilities: 1 high, 5 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146816 - Improper Encoding or Escaping of Output
CVE-2026-84292		 CWE-116 Medium
No
No
 94.4-1.el10_2 02.09.2026 SB2026090297
SB2026092458
SB2026093076
and 4 more
#VU145068 - Double Decoding of the Same Data
CVE-2026-75899		 CWE-174 Medium
No
No
 94.4-1.el10_2 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 7 more
#VU145066 - Server-Side Request Forgery (SSRF)
CVE-2026-75975		 CWE-918 Medium
No
No
 94.4-1.el10_2 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 8 more
#VU145064 - Improper Handling of URL Encoding (Hex Encoding)
CVE-2026-76172		 CWE-177 Medium
No
No
 94.4-1.el10_2 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 8 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800		 CWE-94 High
No
No
 94.3-1.el10_2 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 66 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 94.3-1.el10_2 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 72 more