Back Linuxsecurity

Fedora 44 pcs Important Code Execution Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 10, 2026

Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints

* Fri May 15 2026 Michal Pospíšil - 0.12.2-2 - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Resolves: rhbz#2454042 - Fixed a crash when running pcs resource|stonith list Resolves: rhbz#2458608 - Fixed order of resources in sets when listing configuration of constraints Resolves: rhbz#2461143

[ 1 ] Bug #2454042 - CVE-2026-4800 pcs: lodash: Arbitrary code execution via untrusted input in template imports [fedora-all] [ 2 ] Bug #2458608 - pcs resource list produces traceback [ 3 ] Bug #2461143 - pcs constraint in default text mode orders resources alphabetically

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d420bebe72' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 and 44 pcs Code Execution Vulnerabilities Addressed Fedora has released important updates for its pcs-web-ui application to address vulnerabilities identified as CVE-2026-4800. These vulnerabilities allow arbitrary code execution via untrusted input in template imports. The updates were published on June 10, 2026, and affect users of Fedora 43 and 44. The issues were resolved in version 0.12.2-2, which was updated on May 15, 2026. Users are advised to apply the updates using the 'dnf' update program. The vulnerabilities were linked to bugs that caused crashes and improper ordering of resources in the application. The patches are crucial for maintaining system security and preventing potential exploitation. 2 sources 61

Extracted Entities

Fedora 44 pcs Important Code Execution Fix CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

IP Addresses (1)