CVE-2026-39275

UNKNOWN View on NVD ↗

Description

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components.

References

https://github.com/Securify-AI/CVE-2026-39275

Published: Aug 26, 2026 21:16 UTC Modified: Aug 26, 2026 21:16 UTC