AlmaLinux 9.2 [TuxCare] Security Update: NetworkManager / NetworkManager-adsl / NetworkManager-bluetooth / etc (ALMALINUX9.2:CLSA-2025:1764322970)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764322970 advisory. - DHCP can add routes to a client's routing table via the classless static route option 121. VPN-based security solutions that rely on routes...

EUVD-2026-89499

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101: Improper Authorization

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101

A remote, authenticated SAML user can exploit an improper authorization vulnerability in the WatchGuard Fireware OS SAML login process. By sending a specially crafted request, an attacker with legitimate access only to the Access Portal can obtain unauthorized Mobile VPN with SSL access . No spec...

CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

[SECURITY] Fedora 44 Update: NetworkManager-l2tp-1.52.6-1.fc44

This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager...

[SECURITY] Fedora 44 Update: NetworkManager-iodine-1.2.0-29.fc44

This package contains software for integrating VPN capabilities with the iodine server and NetworkManager...

[SECURITY] Fedora 43 Update: NetworkManager-l2tp-1.52.6-1.fc43

This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager...

[SECURITY] Fedora 43 Update: NetworkManager-iodine-1.2.0-29.fc43

This package contains software for integrating VPN capabilities with the iodine server and NetworkManager...

[SECURITY] Fedora 45 Update: NetworkManager-iodine-1.2.0-29.fc45

This package contains software for integrating VPN capabilities with the iodine server and NetworkManager...

PT-2026-102950

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An improper authorization issue exists in the SAML login process. This allows a remote, authenticated SAML user who only has access to the Access Portal to gain unauthorized...

CVE-2026-91838

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

CVE-2026-91840 Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91839

A flaw in the NetworkManager-fortisslvpn plugin (specifically the nm-fortisslvpn-service ) allows a local unprivileged user to achieve arbitrary code execution with root privileges . The root cause is the improper handling of carriage-return/line-feed (CR/LF) characters within VPN connection prof...

EUVD-2026-87248

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...