CVE-2026-91149

Name of the Vulnerable Software and Affected Versions Cockpit (affected versions not specified)

Description An unauthenticated remote attacker can cause a denial of service (DoS) by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This action forces the service to create an unbounded number of detached threads, which exhausts system resources including memory and file descriptors, resulting in the degradation or complete unavailability of the service for legitimate users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.