Lucene search
+L

30 matches found

OSV
OSV
•added 2026/09/25 6:17 p.m.•9 views

DEBIAN-CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS6.2AI score0.00193EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 6:17 p.m.•11 views

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS0.00194EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/25 6:17 p.m.•9 views

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS0.00193EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/25 6:17 p.m.•17 views

DEBIAN-CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS6.2AI score0.00194EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 5:56 p.m.•37 views

CVE-2026-91841

A flaw exists in NetworkManager-vpnc , a VPN plugin for NetworkManager, which allows a local unprivileged user to achieve local privilege escalation . By injecting a newline character into the CA-File path , an attacker can manipulate the plugin to execute arbitrary commands as the root user . Th...

7.8CVSS6.2AI score0.00194EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/25 5:56 p.m.•10 views

EUVD-2026-87251

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS6.2AI score0.00194EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/25 5:56 p.m.•39 views

CVE-2026-91841 Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS0.00194EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/25 5:56 p.m.•20 views

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS6.2AI score0.00194EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/25 5:56 p.m.•13 views

CVE-2026-91841 Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS6.2AI score0.00194EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/25 5:56 p.m.•12 views

CVE-2026-91840 Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS6.2AI score0.00193EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/25 5:56 p.m.•41 views

CVE-2026-91840 Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS0.00193EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/25 5:56 p.m.•35 views

CVE-2026-91840

A local privilege escalation vulnerability exists in NetworkManager-vpnc , allowing an unprivileged user to escalate privileges to root . The flaw is caused by newline injection in the VPN username field, which enables an attacker to manipulate the vpnc configuration to execute an arbitrary progr...

7.8CVSS6.2AI score0.00193EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/25 5:56 p.m.•7 views

EUVD-2026-87250

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS6.2AI score0.00193EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•8 views

CVE-2026-91841: Improper Neutralization of CRLF Sequences

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS6.3AI score0.00194EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•5 views

CVE-2026-91840: Improper Neutralization of CRLF Sequences

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS6.3AI score0.00193EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 11:00 a.m.•14 views

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

7.8CVSS6.2AI score0.00193EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 10:18 a.m.•15 views

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

7.8CVSS6.2AI score0.00194EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•32 views

Fedora 28 : 1:NetworkManager-vpnc (2018-eb5ea0abaf)

Update to 1.2.6 to fix a local authenticated privilege escalation bug CVE-2018-10900. The issue has been discovered and responsibly disclosed by Denis Andzakovic: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc Note that Tenable Network Security has extracted the preceding description bloc...

8.8CVSS7.4AI score0.03925EPSS
SaveExploits7References3
Tenable Nessus
Tenable Nessus
•added 2018/08/16 12:00 a.m.•31 views

openSUSE Security Update : NetworkManager-vpnc (openSUSE-2018-859)

This update for NetworkManager-vpnc fixes the following issues : Security issue fixed : - CVE-2018-10900: Check configurations that contain newline characters and invalidate them to avoid security attacks bsc1101147. This update was imported from the SUSE:SLE-12-SP2:Update update project...

8.8CVSS7.5AI score0.03925EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2018/08/14 12:00 a.m.•33 views

openSUSE: Security Advisory for Recommended (openSUSE-SU-2018:2307-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.7AI score0.03925EPSS
SaveExploits7References2
Rows per page
Query Builder