CVE-2026-91149 in Red Hat
요약
\~에 의해 MITRE • 2026. 09. 18.
A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the `cockpit-tls` service. This forces the service to create an unbounded number of detached threads, consuming system resources such as memory and file descriptors. The primary consequence is a denial of service (DoS), leading to degradation or complete unavailability of the Cockpit service for legitimate users.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.