Fedora Rust-Cargo Information Disclosure Vulnerabilities 2026

Linuxsecurity

Fedora Rust-Cargo Information Disclosure Vulnerabilities 2026

First seen 27 Aug 2026, 03:38 UTC • •45.9

Article Content

1 / 30

Browse articles

ThreatCluster •August 28, 2026 at 03:24 UTC

•CVE-2026-5222 affects Fedora Rust-Cargo versions 0.10.24 and earlier.
•The vulnerabilities stem from a URL normalization flaw leading to information disclosure.
•Patches are available, and users should update their systems immediately.

Multiple information disclosure vulnerabilities have been identified in Fedora's Rust-Cargo packages, primarily affecting versions 0.10.24 and earlier. The vulnerabilities, cataloged under CVE-2026-5222, arise from a URL normalization flaw that could potentially expose sensitive data. Affected systems include Fedora 43 and 44, with updates released to mitigate these risks. The vulnerabilities were disclosed on May 25, 2026, and have since been addressed with patches. Users are advised to update their systems using the 'dnf' package manager to the latest versions. The updates include various packages related to Rust-Cargo, which are critical for managing Rust dependencies. The advisory emphasizes the importance of applying these updates promptly to safeguard against potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 45d ago How this analysis works

Timeline

2026-05-25

CVE-2026-5222 published

Information disclosure vulnerability identified in Rust-Cargo due to URL normalization flaw.

2026-08-18

Updates released for Fedora Rust-Cargo

Fedora released updates to address CVE-2026-5222, including cargo-c version 0.10.24 and related packages.

2026-08-27

Advisories published on vulnerabilities

Multiple advisories were published detailing the vulnerabilities and urging users to apply updates.

More articles in this cluster (29)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (1)

Fedora

Vulnerability (2)

CVE-2026-5222
URL Normalization Flaw

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Affected Platform (1)

Linux

Relationships

CVE-2026-5222 targets Linux
URL Normalization Flaw targets Linux
Data Breach targets Linux
CVE-2026-5222 related to Fedora
CVE-2026-5222 related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track Fedora and CVE-2026-5222 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…