Red Hat Product Errata RHSA-2026:21390 - Security Advisory Issued: 2026-05-27 Updated: 2026-05-27 RHSA-2026:21390 - Security Advisory Overview Updated Packages Synopsis Important: cockpit security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for cockpit is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI (CVE-2026-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2451155 - CVE-2026-4802 cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI CVEs CVE-2026-4802 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe x86_64 cockpit-334.2-1.el10_0.x86_64.rpm SHA-256: 92e74324d8ace1e64d1783c9725fa285c516b5d7c702d702241c2f67c3065752 cockpit-bridge-334.2-1.el10_0.x86_64.rpm SHA-256: 5000f54d7da3e921c4c0210ab613e9ae0a41b211e983b974f62423a686108ccc cockpit-debuginfo-334.2-1.el10_0.x86_64.rpm SHA-256: eca7f78e1abfd61edfba0476e69b35d666f80f8db4a3cfd87059f1dcb99a55f1 cockpit-debugsource-334.2-1.el10_0.x86_64.rpm SHA-256: 0ee2a996044040163ef230ae0cb69757948b5dda81cc1dd25dd46452276aef51 cockpit-doc-334.2-1.el10_0.noarch.rpm SHA-256: 285474a2c21c48fc4797186d04e4852a82351df87c04f3e44114a586558c8788 cockpit-packagekit-334.2-1.el10_0.noarch.rpm SHA-256: 499bf2319c90304db7ccb18c405fdd7ab9df4bc4a34241a18192a0e17243f1a0 cockpit-storaged-334.2-1.el10_0.noarch.rpm SHA-256: d266ca8ce73f5bfe51e016480fcbdb048b76332c1e28028ed172ab529d302338 cockpit-system-334.2-1.el10_0.noarch.rpm SHA-256: fd2f66a58afcc7aadf27049ed87a17def3f3fa2885e1486a5c7f009093d9d583 cockpit-ws-334.2-1.el10_0.x86_64.rpm SHA-256: bfe650d040eeb09e0b177a1d3fe1a3e859b9336c20fd379e45f507f337936174 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe s390x cockpit-334.2-1.el10_0.s390x.rpm SHA-256: b8711b7a1d64dede155f387fd9d03b1764a9b9f633ba6eba47ac0c8b40c49372 cockpit-bridge-334.2-1.el10_0.s390x.rpm SHA-256: c5a1fcff8f1b1f9a57c2385c3579dd6c39c2f4410eda7d95b64ea3166dcc5850 cockpit-debuginfo-334.2-1.el10_0.s390x.rpm SHA-256: 6d079cd26ba350b8050865ea37b5d98ecba790d8fa550d92c56272dc63b6e09a cockpit-debugsource-334.2-1.el10_0.s390x.rpm SHA-256: 74d30978a9f754e244c302b221cfdb323a0306076b4a93c69088f4da9a2cda18 cockpit-doc-334.2-1.el10_0.noarch.rpm SHA-256: 285474a2c21c48fc4797186d04e4852a82351df87c04f3e44114a586558c8788 cockpit-packagekit-334.2-1.el10_0.noarch.rpm SHA-256: 499bf2319c90304db7ccb18c405fdd7ab9df4bc4a34241a18192a0e17243f1a0 cockpit-storaged-334.2-1.el10_0.noarch.rpm SHA-256: d266ca8ce73f5bfe51e016480fcbdb048b76332c1e28028ed172ab529d302338 cockpit-system-334.2-1.el10_0.noarch.rpm SHA-256: fd2f66a58afcc7aadf27049ed87a17def3f3fa2885e1486a5c7f009093d9d583 cockpit-ws-334.2-1.el10_0.s390x.rpm SHA-256: dfad2a9d3f8f810cc4fc52532227612742cfa8026d38fbcefddec88567ce4c74 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe ppc64le cockpit-334.2-1.el10_0.ppc64le.rpm SHA-256: fd101c0b462b12561d36b06313b597e8b2c960be0c135dd6f8a548b5fb1f6b57 cockpit-bridge-334.2-1.el10_0.ppc64le.rpm SHA-256: b17e8f6ff6a2ba1666493be1510a4e7ee39fd82f556162075da3d082b8a784b9 cockpit-debuginfo-334.2-1.el10_0.ppc64le.rpm SHA-256: 97051e6aeb2c5e544865504927a4fcdcb6f971da77fbd38e69f4bac399f48f24 cockpit-debugsource-334.2-1.el10_0.ppc64le.rpm SHA-256: 8bd0a7ed5b160b73a00cc25d0a8ca057f54ad9fd86e13f428efdd871136574b3 cockpit-doc-334.2-1.el10_0.noarch.rpm SHA-256: 285474a2c21c48fc4797186d04e4852a82351df87c04f3e44114a586558c8788 cockpit-packagekit-334.2-1.el10_0.noarch.rpm SHA-256: 499bf2319c90304db7ccb18c405fdd7ab9df4bc4a34241a18192a0e17243f1a0 cockpit-storaged-334.2-1.el10_0.noarch.rpm SHA-256: d266ca8ce73f5bfe51e016480fcbdb048b76332c1e28028ed172ab529d302338 cockpit-system-334.2-1.el10_0.noarch.rpm SHA-256: fd2f66a58afcc7aadf27049ed87a17def3f3fa2885e1486a5c7f009093d9d583 cockpit-ws-334.2-1.el10_0.ppc64le.rpm SHA-256: bcb45f79e1ff9546ef03cfbfa64c5d95c3d175e45f238009437934757d55c7fd Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe aarch64 cockpit-334.2-1.el10_0.aarch64.rpm SHA-256: 601ae07cd776a169d4c525188c5b5a79534f3c0af5a3f3513af537708e69ab81 cockpit-bridge-334.2-1.el10_0.aarch64.rpm SHA-256: 7b31af2102810ac9fe5ce244a8c10b24292670adc60c4225e80970225fc6b35f cockpit-debuginfo-334.2-1.el10_0.aarch64.rpm SHA-256: b6a10396c3692256c228dcd21f9fec496c3fa75bfeabc9c9cf8c9bbdd9217859 cockpit-debugsource-334.2-1.el10_0.aarch64.rpm SHA-256: d0623795660813f676039270fb557ed7de8af48ec14d57f38720895403eea3c2 cockpit-doc-334.2-1.el10_0.noarch.rpm SHA-256: 285474a2c21c48fc4797186d04e4852a82351df87c04f3e44114a586558c8788 cockpit-packagekit-334.2-1.el10_0.noarch.rpm SHA-256: 499bf2319c90304db7ccb18c405fdd7ab9df4bc4a34241a18192a0e17243f1a0 cockpit-storaged-334.2-1.el10_0.noarch.rpm SHA-256: d266ca8ce73f5bfe51e016480fcbdb048b76332c1e28028ed172ab529d302338 cockpit-system-334.2-1.el10_0.noarch.rpm SHA-256: fd2f66a58afcc7aadf27049ed87a17def3f3fa2885e1486a5c7f009093d9d583 cockpit-ws-334.2-1.el10_0.aarch64.rpm SHA-256: eebe91b6b81c12ae44ca7834ccb08e0ba97c67b11f535fecf76f2adb7a1e7565 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe aarch64 cockpit-334.2-1.el10_0.aarch64.rpm SHA-256: 601ae07cd776a169d4c525188c5b5a79534f3c0af5a3f3513af537708e69ab81 cockpit-bridge-334.2-1.el10_0.aarch64.rpm SHA-256: 7b31af2102810ac9fe5ce244a8c10b24292670adc60c4225e80970225fc6b35f cockpit-debuginfo-334.2-1.el10_0.aarch64.rpm SHA-256: b6a10396c3692256c228dcd21f9fec496c3fa75bfeabc9c9cf8c9bbdd9217859 cockpit-debugsource-334.2-1.el10_0.aarch64.rpm SHA-256: d0623795660813f676039270fb557ed7de8af48ec14d57f38720895403eea3c2 cockpit-doc-334.2-1.el10_0.noarch.rpm SHA-256: 285474a2c21c48fc4797186d04e4852a82351df87c04f3e44114a586558c8788 cockpit-packagekit-334.2-1.el10_0.noarch.rpm SHA-256: 499bf2319c90304db7ccb18c405fdd7ab9df4bc4a34241a18192a0e17243f1a0 cockpit-storaged-334.2-1.el10_0.noarch.rpm SHA-256: d266ca8ce73f5bfe51e016480fcbdb048b76332c1e28028ed172ab529d302338 cockpit-system-334.2-1.el10_0.noarch.rpm SHA-256: fd2f66a58afcc7aadf27049ed87a17def3f3fa2885e1486a5c7f009093d9d583 cockpit-ws-334.2-1.el10_0.aarch64.rpm SHA-256: eebe91b6b81c12ae44ca7834ccb08e0ba97c67b11f535fecf76f2adb7a1e7565 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe s390x cockpit-334.2-1.el10_0.s390x.rpm SHA-256: b8711b7a1d64dede155f387fd9d03b1764a9b9f633ba6eba47ac0c8b40c49372 cockpit-bridge-334.2-1.el10_0.s390x.rpm SHA-256: c5a1fcff8f1b1f9a57c2385c3579dd6c39c2f4410eda7d95b64ea3166dcc5850 cockpit-debuginfo-334.2-1.el10_0.s390x.rpm SHA-256: 6d079cd26ba350b8050865ea37b5d98ecba790d8fa550d92c56272dc63b6e09a cockpit-debugsource-334.2-1.el10_0.s390x.rpm SHA-256: 74d30978a9f754e244c302b221cfdb323a0306076b4a93c69088f4da9a2cda18 cockpit-doc-334.2-1.el10_0.noarch.rpm SHA-256: 285474a2c21c48fc4797186d04e4852a82351df87c04f3e44114a586558c8788 cockpit-packagekit-334.2-1.el10_0.noarch.rpm SHA-256: 499bf2319c90304db7ccb18c405fdd7ab9df4bc4a34241a18192a0e17243f1a0 cockpit-storaged-334.2-1.el10_0.noarch.rpm SHA-256: d266ca8ce73f5bfe51e016480fcbdb048b76332c1e28028ed172ab529d302338 cockpit-system-334.2-1.el10_0.noarch.rpm SHA-256: fd2f66a58afcc7aadf27049ed87a17def3f3fa2885e1486a5c7f009093d9d583 cockpit-ws-334.2-1.el10_0.s390x.rpm SHA-256: dfad2a9d3f8f810cc4fc52532227612742cfa8026d38fbcefddec88567ce4c74 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM cockpit-334.2-1.el10_0.src.rpm SHA-256: 9b240da4032de3348d6a0b959d3a9e3dd1d50b1ff1ef59badda62732fb3490fe ppc64le cockpit-334.2-1.el10_0.ppc64le.rpm SHA-256: fd101c0b462b12561d36b06313b597e8b2c960be0c135dd6f8