PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-13533 agentejo CVE debrief

A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. The issue affects the function Spyc::YAMLLoad in the file /config/config.yaml of the htaccess Handler component. This vulnerability allows remote attackers to access files or directories. The exploit has been publicly disclosed and may be used. The vendor was contacted but did not respond.

Vendor
agentejo
Product
Cockpit CMS
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-29
Original CVE updated
2026-06-29
Advisory published
2026-06-29
Advisory updated
2026-06-29

Who should care

Organizations using agentejo Cockpit CMS up to version 0.12.2 should prioritize patching this vulnerability to prevent potential remote attacks. Given the public disclosure of the exploit, defenders should act quickly to secure their systems. The vulnerability's medium severity (CVSS score of 5.5) indicates a significant risk that should not be overlooked.

Technical summary

The vulnerability CVE-2026-13533 affects agentejo Cockpit CMS up to version 0.12.2. It is caused by a weakness in the Spyc::YAMLLoad function located in the /config/config.yaml file of the htaccess Handler component. This issue allows remote attackers to manipulate the system such that files or directories become accessible. The vulnerability has been assigned a CVSS score of 5.5, indicating a medium severity level. The CVSS vector is CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. The weaknesses associated with this vulnerability are CWE-425 and CWE-552.

Defensive priority

Defenders should prioritize patching CVE-2026-13533 due to its medium severity and public exploit disclosure. Immediate action is necessary to prevent potential remote attacks on agentejo Cockpit CMS systems.

Recommended defensive actions

  • Apply the latest patch or update for agentejo Cockpit CMS to version 0.12.2 or later.
  • Review and adjust configuration settings for the htaccess Handler component to minimize exposure.
  • Monitor systems for suspicious activity related to file or directory access.
  • Consider implementing additional security measures such as web application firewalls (WAFs) to detect and prevent exploitation attempts.
  • Verify that all necessary security updates and patches are applied to prevent exploitation.

Evidence notes

The CVE-2026-13533 vulnerability details are based on information from the NVD and Vuldb sources. The vulnerability affects agentejo Cockpit CMS up to version 0.12.2. The exploit has been publicly disclosed, and there is no indication of a vendor response or fix. Further investigation and patching are necessary to mitigate this vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-13533 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-13533

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-13533 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-13533

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.