{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"cockpit","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"cockpit","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"cockpit","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/udi-base-rhel10","product":"Red Hat OpenShift Dev Spaces","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/udi-base-rhel9","product":"Red Hat OpenShift Dev Spaces","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/udi-rhel9","product":"Red Hat OpenShift Dev Spaces","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-91150","cwes":["CWE-770"],"description":"A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the `cockpit-ws` service.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794422292565,"publishedAt":1794422292565,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-91150"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478436"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/cockpit-project/cockpit/commit/4bc66ac3e5b4923528f1ac89517a009b7bc90f93"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/cockpit-project/cockpit/releases/tag/372"}],"remediation":[],"revision":"09294845113643a8fefd084df3ceb100c86871daa5921ae6a27a5b59ae5a2b1a","sources":[{"modifiedAt":1794422292565,"name":"CNA: redhat","retrievedAt":1794424177633,"url":"https://www.cve.org/CVERecord?id=CVE-2026-91150"}],"ssvc":null,"status":"published","title":"Cockpit: cockpit: denial of service via unbounded fragmented websocket messages","updatedAt":1794424177633}