CVE-2026-13533
Medium · 5.3CVSS
5.3
EPSS
0.5%
Published
Jun 29, 2026
CISA due date
—
The record
A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this issue is the function Spyc::YAMLLoad of the file /config/config.yaml of the component htaccess Handler. Such manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Configuration settings should be changed. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14953 A low-privileged remote attacker can enumerate all configured users and identify which… CWE-425
- CVE-2026-76799 A weakness has been identified in code-projects Login Registration System 1.0. CWE-425
- CVE-2026-19903 A vulnerability has been found in SourceCodester Online Clothing Store 1.0. CWE-425
- CVE-2026-21760 HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced… CWE-425
- CVE-2026-10521 An high privileged remote attacker can access a hidden configuration method, that should… CWE-425
- CVE-2026-9610 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-425
- CVE-2026-34028 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes… CWE-425
- CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended… CWE-425