CVE-2026-4802: Cockpit command injection lets low-privilege authenticated users gain RCE via journal log filters; public PoC released
A command injection vulnerability, CVE-2026-4802, was disclosed in Cockpit, the web-based Linux administration tool from Red Hat. It was found by Hakai's Research team. Any authenticated user, including low-privilege accounts such as viewer, can inject OS commands through the system logs filter feature and obtain remote code execution on …