CVE-2019-10786

CVE-2019-10786 concerns the network-manager module (through 1.0.2). The vulnerability arises from improper validation of user-supplied input in execSync usage, enabling remote attackers to run arbitrary commands via the execSync argument (examples and PoC show NM_CLI-driven command execution). Af...