SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-76235

HIGH · CVSS 7.5 EPSS 0.36%

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A memory leak vulnerability in the cockpit-ws component allows remote unauthenticated attackers to exhaust system memory through repeated unauthenticated requests containing a CockpitLang cookie. This can lead to a denial of service, impacting the availability of the affected system. Organizations using cockpit-ws should prioritize patching this vulnerability to mitigate potential service disruptions.

CVE
CVE-2026-76235
Severity
HIGH
CVSS
7.5
EPSS
0.36%

Original NVD Description

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service.