Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite assets with malicious versions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-38993 Directory Traversal in Cockpit 2.13.5 Buckets Component Allows Arbitrary File Write https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-38993
Post summary
The post announces the discovery of CVE‑2026‑38993, a directory traversal flaw in Cockpit 2.13.5’s Buckets component that allows attackers to write arbitrary files.
🚨*CVE* CVE-2026-38993 Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitra… https://www.cve.org/CVERecord?id=CVE-2026-38993 ----- Traducción: CVE-2026-38993 Coc… http://infoflow.cloud`
Post summary
The tweet highlights CVE-2026-38993, a directory traversal flaw in Cockpit 2.13.5 and earlier, allowing authenticated attackers to write arbitrary files, and provides a link to the CVE record.
CVE-2026-38993 Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitra… https://www.cve.org/CVERecord?id=CVE-2026-38993
Post summary
CVE-2026-38993 is a directory traversal flaw in Cockpit 2.13.5 and earlier, enabling authenticated attackers to write arbitrary files through the Buckets component.