Linuxsecurity Critical Denial of Service Vulnerability in Fedora's perl-XML-Bare
Article Content
- •Critical vulnerabilities in perl-XML-Bare affect versions up to 0.53.
- •CVE-2026-57074 and CVE-2026-13401 can lead to Denial of Service and infinite loops.
- •Patches are available and should be applied immediately using the 'dnf' update program.
Fedora has released critical updates for the perl-XML-Bare module, addressing vulnerabilities that could lead to Denial of Service (DoS) and infinite loops when parsing malformed XML attributes. The vulnerabilities are identified as CVE-2026-57074 and CVE-2026-13401, both published on July 16, 2026. Affected versions are perl-XML-Bare versions up to 0.53. The updates were made available on August 30, 2026, and users are urged to apply the patches using the 'dnf' update program. The vulnerabilities could be exploited through crafted XML input, potentially affecting systems relying on this parser. The patches are crucial for maintaining system security and preventing service disruptions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-13401 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…