Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2026-19685

Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Hardened Images Hummingbird and 4 more
CVE-2026-10805

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Hummingbird Jboss Enterprise Application Platform Expansion Pack and 12 more
CVE-2009-4144

NetworkManager: WPA enterprise network not verified when certificate is removed

NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnome Redhat
Products
Networkmanager Enterprise Linux
CVE-2009-4145

NetworkManager: information disclosure by nm-connection-editor

nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Gnome Redhat
Products
Networkmanager Enterprise Linux
CVE-2016-0764

NetworkManager: Race condition allowing info leak

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop Enterprise Linux Hpc Node and 3 more
CVE-2015-0272

NetworkManager: remote DoS using IPv6 RA with bogus MTU

GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.

CVSS 2.0 · 5.0 Medium EPSS 4.9% KEV · Not listed
Vendors
Canonical Gnome Oracle and 2 more
Products
Ubuntu Linux Networkmanager Linux and 7 more
CVE-2015-2924

NetworkManager: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements

The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.

CVSS 2.0 · 3.3 Low EPSS 1.2% KEV · Not listed
Vendors
Networkmanager Project Redhat
Products
Networkmanager Enterprise Linux
CVE-2011-2176

NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks

GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Gnome Redhat
Products
Networkmanager Enterprise Linux
CVE-2011-3364

NetworkManager: Console user can escalate to root via newlines in ifcfg-rh connection name

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute arbitrary commands via a newline character in the name for a new network connection, which is not properly handled when writing to the ifcfg file.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Gnome Redhat
Products
Ifcfg-rh Plug-in Networkmanager Enterprise Linux
CVE-2021-20297

NetworkManager: Profile with match.path setting triggers crash

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Networkmanager Enterprise Linux and 1 more
CVE-2020-10754

NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Networkmanager Enterprise Linux
CVE-2018-1000135

NetworkManager: Information exposure in DNS resolver

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Gnome Redhat
Products
Ubuntu Linux Networkmanager Enterprise Linux