CISA Confirms Exploitation of Linux Firewall Flaw in Fedora 45

Linuxsecurity

CISA Confirms Exploitation of Linux Firewall Flaw in Fedora 45

First seen 28 Sep 2026, 05:37 UTC • •72.0

Article Content

1 / 8

Browse articles

ThreatCluster •September 28, 2026 at 06:33 UTC

•CISA confirms active exploitation of a Linux firewall flaw in Fedora 45.
•Multiple components, including Cinnamon and Nemo, are affected by this vulnerability.
•Users are urged to apply updates released on September 22 and 23, 2026.

CISA has confirmed the exploitation of a Linux firewall vulnerability affecting Fedora 45 systems. This flaw has been linked to multiple components, including the Cinnamon desktop environment and its associated applications. Users are advised to check for updates and apply patches to mitigate the risk. The updates were released on September 22 and 23, 2026, addressing various components such as Muffin, Nemo, and Cinnamon-session. The advisory emphasizes the urgency of applying these updates to prevent potential exploitation. Affected systems include those running Fedora 45 with the vulnerable packages. The specific CVEs related to this vulnerability have not been disclosed in the articles, but the situation is being monitored closely by security professionals.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-09-22

Cinnamon updates released

Updates for the Cinnamon desktop environment were released, addressing security vulnerabilities.

2026-09-23

Muffin and Nemo updates released

Security updates for Muffin and Nemo were issued to fix vulnerabilities in Fedora 45.

2026-09-28

CISA confirms exploitation

CISA confirmed that the Linux firewall flaw is being actively exploited in the wild.

More articles in this cluster (7)

Threat Graph

2 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Affected Platform (1)

Linux

Relationships

Zero-day Exploit targets Linux

Continue Reading

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…

Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…