CVE-2026-93337

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a val...

SUSE CVE-2026-75131

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a crafted VPN username. Attackers can embed a double-quote...

OPENSUSE-SU-2026:11802-1 NetworkManager-applet-l2tp-1.52.6-1.1 on GA media

These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-93337: Improper Neutralization of Argument Delimiters in a Command

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a val...

PT-2026-98959

Name of the Vulnerable Software and Affected Versions NetworkManager-sstp affected versions not specified Description A flaw in the SSTP VPN plugin for NetworkManager allows a local unprivileged user to execute arbitrary commands with root privileges. The issue occurs when shell...

PT-2026-98929

Name of the Vulnerable Software and Affected Versions NetworkManager-iodine affected versions not specified Description A flaw exists in the iodine VPN plugin for NetworkManager. A local unprivileged user can achieve local privilege escalation by exploiting the way the nameserver setting is...

PT-2026-99045

Name of the Vulnerable Software and Affected Versions NetworkManager-fortisslvpn affected versions not specified Description The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters within VPN connection profile credentials. A local unprivileged user can exploit th...

PT-2026-95076

Name of the Vulnerable Software and Affected Versions NetworkManager-l2tp affected versions not specified Description Improper input validation allows local users with VPN connection creation permissions to inject arbitrary pppd directives. By providing mru or mtu property values that contain...

PT-2026-99046

Name of the Vulnerable Software and Affected Versions NetworkManager-vpnc affected versions not specified Description A flaw in NetworkManager-vpnc allows a local unprivileged user to escalate privileges to root. An attacker can inject a newline character into the VPN username field to manipulate...

PT-2026-99047

Name of the Vulnerable Software and Affected Versions NetworkManager-vpnc affected versions not specified Description A flaw in the NetworkManager-vpnc VPN plugin allows a local unprivileged user to achieve local privilege escalation. By injecting a newline character into the CA-File path, an...

SUSE CVE-2026-19624

A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties vpn.data and vpn.secrets values unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged user can create and activate their own L2TP VPN profile containing a...

SUSE SLED15: NetworkManager / NetworkManager-bluetooth / etc (SUSE-SU-2026:4148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4148-1 advisory. - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. -...

SUSE SLES12: NetworkManager-devel / libnm-glib-vpn1 / libnm-glib4 / libnm-util2 / etc (SUSE-SU-2026:4181-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4181-1 advisory. - CVE-2025-9615: avoid non-admin user using other users' certificate bsc1257359. - CVE-2026-10805: Local privilege escalation via...

SUSE SLES15 Security Update : NetworkManager (SUSE-SU-2026:4144-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4144-1 advisory. - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user...

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

CVE-2026-91837

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...

CVE-2026-91839

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...

CVE-2026-91838

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

Security update for NetworkManager

This update for NetworkManager fixes the following issues: CVE-2025-9615: avoid non-admin user using other users' certificate bsc1257359. CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. Patch Instructions: To install this SUSE update use the SUSE...