Back Linuxsecurity

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026

Linuxsecurity •LinuxSecurity Advisories • July 22, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

Nuclei is a fast, customizable vulnerability scanner powered by the global

security community and built on a simple YAML-based DSL, enabling collaboration

to tackle trending vulnerabilities on the internet. It helps you find

vulnerabilities in your applications, APIs, networks, DNS, and cloud

* Mon Jul 13 2026 Emir Akdag - 3.11.0-1 - Update to 3.11.0 * Mon Apr 20 2026 Emir Akdag - 3.8.0-1 - Update to 3.8.0

[ 1 ] Bug #2458978 - CVE-2026-5160 nuclei: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation [epel-all] [ 2 ] Bug #2458996 - CVE-2026-5160 nuclei: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation [fedora-all] [ 3 ] Bug #2459399 - nuclei-3.8.0 is available [ 4 ] Bug #2476565 - CVE-2026-41646 nuclei: Nuclei: Information disclosure via JavaScript template local file access bypass [fedora-all] [ 5 ] Bug #2476566 - CVE-2026-41646 nuclei: Nuclei: Information disclosure via JavaScript template local file access bypass [epel-all] [ 6 ] Bug #2486214 - CVE-2026-45287 nuclei: OpenTelemetry-Go: ...

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d36ca2dd19' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Nuclei Vulnerabilities: Cross-site Scripting and Information Disclosure Risks Fedora has released security updates addressing critical vulnerabilities in the Nuclei scanner. CVE-2026-5160, published on April 15, 2026, involves cross-site scripting due to improper URL validation, affecting multiple versions of Nuclei. Additionally, CVE-2026-41646, published on May 8, 2026, allows information disclosure via JavaScript template local file access bypass. Users of Fedora 43 and 44 are advised to apply the updates to mitigate these risks. The vulnerabilities could lead to broader security issues if exploited, particularly in environments with overly broad permissions. The updates can be installed using the 'dnf' package manager. The vulnerabilities highlight the importance of maintaining least privilege access in Linux systems. 2 sources 58

Extracted Entities

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026

The full story

Extracted Entities

Attack Types (2)

CVEs (3)

CWE Weaknesses (2)

Platforms (1)

Tools (1)

Vulnerabilities (1)