Skip to content
Critical Command Injection Vulnerability in Fedora's perl-GD Library

Critical Command Injection Vulnerability in Fedora's perl-GD Library

First seen 19 Jun 2026, 02:54 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 20, 2026 at 02:26 UTC
  • •CVE-2026-11526 is a critical command injection vulnerability affecting perl-GD.
  • •The flaw allows arbitrary command execution via the 2-argument open function.
  • •Users are urged to update to the patched versions in Fedora 43 and 44 immediately.

A critical command injection vulnerability (CVE-2026-11526) was discovered in the perl-GD library used in Fedora 43 and Fedora 44. This flaw arises from the use of the 2-argument form of the open function, which can be exploited to execute arbitrary commands. The vulnerability was published on June 14, 2026, and affects users of the perl-GD library across both Fedora versions. The issue has been addressed in updates released on June 9, 2026, with users urged to apply the patches immediately. The updates can be installed using the 'dnf' package manager. Failure to update may leave systems vulnerable to exploitation. The affected library is widely used for creating and manipulating PNG files, making the impact potentially significant for applications relying on it.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 94d ago How this analysis works

Timeline

2026-06-09
Patches released for perl-GD
Updates for Fedora 43 and 44 were released to fix the command injection vulnerability.
Linuxsecurity
2026-06-14
CVE-2026-11526 published
A critical command injection vulnerability in perl-GD was disclosed, affecting Fedora systems.
Linuxsecurity
2026-06-19
Security advisories published
Fedora released notifications for the critical vulnerability, urging users to apply updates.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Fedora and CVE-2026-11526 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4