CVE-2026-91840: Improper Neutralization of CRLF Sequences

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

PT-2026-99046

Name of the Vulnerable Software and Affected Versions NetworkManager-vpnc affected versions not specified Description A flaw in NetworkManager-vpnc allows a local unprivileged user to escalate privileges to root. An attacker can inject a newline character into the VPN username field to manipulate...