Fedora Restic and Singularity-CE Vulnerabilities Lead to Denial of Service Risks

Linuxsecurity

Fedora Restic and Singularity-CE Vulnerabilities Lead to Denial of Service Risks

First seen 19 Jun 2026, 02:54 UTC • •60.6

Article Content

1 / 21

Browse articles

ThreatCluster •June 20, 2026 at 02:26 UTC

•Fedora 43 and 44 updates address critical DoS and access vulnerabilities in Restic.
•CVE-2026-34986 allows DoS via crafted JSON Web Encryption objects.
•Immediate updates are recommended to mitigate risks from unauthorized access and command execution.

Recent updates for Fedora 43 and 44 address multiple vulnerabilities in Restic and Singularity-CE, including Denial of Service (DoS) issues and unauthorized access risks. The vulnerabilities, identified as CVE-2026-34986, CVE-2026-41179, and CVE-2026-41176, affect Fedora systems and allow attackers to exploit crafted JSON Web Encryption objects and unauthorized command execution. The updates were released on June 10, 2026, and are critical for users to apply to mitigate potential attacks. The vulnerabilities were reported to have been published between April 6 and April 23, 2026. Users are advised to upgrade to the latest versions using the provided commands to secure their systems against these threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 146d ago How this analysis works

Timeline

2026-04-06

CVE-2026-34986 published

Denial of Service vulnerability in Restic via crafted JSON Web Encryption objects disclosed.

2026-04-22

CVE-2026-41176 published

Unauthorized access vulnerability in Restic's Remote Control endpoint disclosed.

2026-04-23

CVE-2026-41179 published

Unauthenticated local command execution vulnerability in Restic disclosed.

2026-06-04

CVE-2026-45287 published

Denial of Service due to file descriptor leak in Restic disclosed.

2026-06-10

Fedora updates released

Updates for Fedora 43 and 44 released to address multiple vulnerabilities in Restic and Singularity-CE.

More articles in this cluster (20)

Following this threat?

Track Azure and CVE-2026-29518 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…

Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…