Skip to content
Threat Feed
Subscribe

Vendor

OpenITCOCKPIT

1 brief RSS
critical advisory

openITCOCKPIT Command Injection Vulnerability (CVE-2026-24893)

openITCOCKPIT Community Edition before 5.5.2 is vulnerable to command injection, allowing authenticated users with host modification privileges to execute arbitrary OS commands on the monitoring backend via crafted host attributes in monitoring command templates.

openITCOCKPIT Community Edition command-injection rce openitcockpit
3r 2t 1c