https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:14:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:58555 <p><strong>Affected:</strong> AlmaLinux:8: NetworkManager, AlmaLinux:8: NetworkManager-adsl, AlmaLinux:8: NetworkManager-bluetooth, AlmaLinux:8: NetworkManager-cloud-setup, AlmaLinux:8: NetworkManager-config-connectivity-redhat, AlmaLinux:8: NetworkManager-config-server, AlmaLinux:8: NetworkManager-dispatcher-routing-rules, AlmaLinux:8: NetworkManager-initscripts-updown, AlmaLinux:8: NetworkManager-libnm, AlmaLinux:8: NetworkManager-libnm-devel and 6 more</p> <p>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.</p> <p>Security Fix(es):</p> <p>* NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: NetworkManager, AlmaLinux:8: NetworkManager-adsl, AlmaLinux:8: NetworkManager-bluetooth, AlmaLinux:8: NetworkManager-cloud-setup, AlmaLinux:8: NetworkManager-config-connectivity-redhat, AlmaLinux:8: NetworkManager-config-server, AlmaLinux:8: NetworkManager-dispatcher-routing-rules, AlmaLinux:8: NetworkManager-initscripts-updown, AlmaLinux:8: NetworkManager-libnm, AlmaLinux:8: NetworkManager-libnm-devel and 6 more</p> <p>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.</p> <p>Security Fix(es):</p> <p>* NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:58555 https://cve.radiocsirt.org/vuln/euvd-2026-375530 EUVD-2026-375530 https://cve.radiocsirt.org/vuln/euvd-2026-375530 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10805 <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&#39;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.</p> <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&#39;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10805 https://cve.radiocsirt.org/vuln/ghsa-rwc7-7qq8-w477 <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&#39;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.</p> <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&#39;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.</p> https://cve.radiocsirt.org/vuln/ghsa-rwc7-7qq8-w477 https://cve.radiocsirt.org/vuln/oesa-2026-2822 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: NetworkManager</p> <p>NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit. Security Fix(es):</p> <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&amp;apos;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.(CVE-2026-10805)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: NetworkManager</p> <p>NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit. Security Fix(es):</p> <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&amp;apos;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.(CVE-2026-10805)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2822 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11693-1 <p>NetworkManager-1.56.1-4.1 on GA media</p> <p>NetworkManager-1.56.1-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11693-1 https://cve.radiocsirt.org/vuln/rhsa-2026:61239 <p>NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend</p> <p>NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend</p> https://cve.radiocsirt.org/vuln/rhsa-2026:61239 https://cve.radiocsirt.org/vuln/rlsa-2026:58555 <p><strong>Affected:</strong> Rocky Linux:8: NetworkManager</p> <p>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.</p> <p>Security Fix(es):</p> <p>* NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: NetworkManager</p> <p>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.</p> <p>Security Fix(es):</p> <p>* NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:58555 https://cve.radiocsirt.org/vuln/suse-su-2026:23475-1 <p>Security update for NetworkManager</p> <p>Security update for NetworkManager</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23475-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10805 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: network-manager, Ubuntu:18.04:LTS: network-manager, Ubuntu:20.04:LTS: network-manager, Ubuntu:22.04:LTS: network-manager, Ubuntu:24.04:LTS: network-manager, Ubuntu:25.10: network-manager, Ubuntu:26.04:LTS: network-manager</p> <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&#39;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: network-manager, Ubuntu:18.04:LTS: network-manager, Ubuntu:20.04:LTS: network-manager, Ubuntu:22.04:LTS: network-manager, Ubuntu:24.04:LTS: network-manager, Ubuntu:25.10: network-manager, Ubuntu:26.04:LTS: network-manager</p> <p>A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager&#39;s dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10805 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2977 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (NetworkManager) ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (NetworkManager) ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2977