Threats tagged 'ghsa-cj5v-4j3m-m6j5'

CVE-2026-91147 is a medium severity vulnerability in the cockpit-ws component of Red Hat Enterprise Linux 10. It allows a remote unauthenticated attacker to cause a denial of service by sending a specially crafted request to the exact URL-root prefix without a trailing slash when WebService.UrlRoot is configured. This causes the cockpit-ws service to terminate unexpectedly, resulting in unavailability of the Cockpit web service.