CVE-2026-4631 — Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cock — CVE Database · The Intelligence Room