Oracle Linux 10 Cockpit Vulnerabilities Lead to Remote Code Execution Risks

Oracle has released important updates for Oracle Linux 10 Cockpit, addressing vulnerabilities that could lead to remote code execution. The updates include fixes for CVE-2026-4802 and CVE-2026-4800, which affect various components of the Cockpit management interface. Specifically, CVE-2026-4802 involves SSH argument injection, while CVE-2026-4800 relates to the Cockpit Image Builder. Both vulnerabilities were confirmed and patches are now available. Users of Oracle Linux 10 are advised to update their systems promptly to mitigate these risks. The updates were published on July 17, 2026, and are critical for maintaining system security.

Key Points: • Oracle Linux 10 Cockpit updates address critical remote code execution vulnerabilities. • CVE-2026-4802 involves SSH argument injection, posing significant risks to affected systems. • Users are urged to apply the updates immediately to protect against potential exploits.