Skip to content
Multiple Fedora 45 Applications Patched for Command Execution Vulnerability

Multiple Fedora 45 Applications Patched for Command Execution Vulnerability

First seen 30 Oct 2026, 11:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 12:47 UTC
  • •CVE-2026-110236 allows arbitrary command execution in multiple Fedora 45 applications.
  • •The vulnerability affects KDE Plasma 6.8.1 and related applications, with a CVSS score of 7.1.
  • •Users are advised to apply patches immediately to prevent potential exploitation.

A vulnerability (CVE-2026-110236) affecting various Fedora 45 applications has been disclosed, allowing arbitrary command execution via crafted folder names. The flaw impacts applications such as KDE Portal, Spacebar, Spectacle, and others, primarily on systems using KDE Plasma 6.8.1 and Gear 28.08.2. The vulnerability was published on October 13, 2026, with a CVSS score of 7.1, indicating a high severity. Affected versions include multiple KDE applications, and users are urged to apply updates immediately to mitigate risks. The updates can be installed using the 'dnf' package manager. Exploitation of this vulnerability could allow attackers to execute commands without user authentication, posing a significant threat to system integrity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-13
CVE-2026-110236 published
A critical vulnerability allowing command execution via crafted folder names was disclosed.
Linuxsecurity
2026-10-29
Multiple patches released
Fedora released updates for various applications to fix the critical command execution vulnerability.
Linuxsecurity
Recent
Exploitation confirmed
Reports indicate that the vulnerability is being actively exploited in the wild.
Linuxsecurity

More articles in this cluster (32)

Following this threat?

Track Fedora and CVE-2026-110236 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 4

Common questions

Which applications are affected?
The vulnerability affects multiple Fedora 45 applications including KDE Portal, Spacebar, Spectacle, and others.
Is there a patch available?
Yes, patches have been released for all affected applications and can be installed using the 'dnf' package manager.
What is the risk if I don't update?
Failure to update may allow attackers to execute arbitrary commands on your system without authentication.