A flaw was found in Cockpit CMS. The application disables Transport Layer Security (TLS) certificate verification when making background requests to restart web workers. An attacker in a position to intercept network traffic could exploit this flaw by presenting an arbitrary certificate, allowing them to capture sensitive worker authentication tokens and trigger background worker tasks.
Last checked: 2026-10-06 16:33 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-05 13:16 UTC)
Fix evidence last checked: 2026-10-04 17:33 UTC