CVE-2026-10805
CVE-2026-10805 · Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
CVSS 6.7 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 1:1.40.16-21.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 advanced mission critical update support
- Versions
- ≥ 1:1.30.0-19.el8_4.1: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 extended update support long-life add-on
- Versions
- ≥ 1:1.30.0-19.el8_4.1: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 advanced mission critical update support
- Versions
- ≥ 1:1.36.0-18.el8_6.1: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support long-life add-on
- Versions
- ≥ 1:1.36.0-18.el8_6.1: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 telecommunications update service
- Versions
- ≥ 1:1.40.16-10.el8_8.1: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 update services for sap solutions
- Versions
- ≥ 1:1.40.16-10.el8_8.1: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 1:1.54.3-5.el9_8: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 update services for sap solutions
- Versions
- ≥ 1:1.42.2-32.el9_2.1: Not affected (rpm)
No fix published
red hat enterprise linux 9.4 update services for sap solutions
- Versions
- ≥ 1:1.46.0-38.el9_4.1: Not affected (rpm)
No fix published
red hat enterprise linux 9.6 extended update support
- Versions
- ≥ 1:1.52.0-11.el9_6.1: Not affected (rpm)
No fix published
multicluster engine for kubernetes
No fix published
red hat enterprise linux 10
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat hardened images
No fix published
red hat jboss enterprise application platform expansion pack
No fix published
red hat openshift container platform 4
No fix published
network-manager Debian:12
- Versions
- 1.42.4-1
- 1.42.4-1+deb12u1
- 1.42.6-1
- 1.42.6-2
- 1.42.8-1
- 1.44.0-1
- 1.44.2-1
- 1.44.2-2
- 1.44.2-3
- 1.44.2-4
- 1.44.2-5
- 1.44.2-6
- 1.44.2-7
- 1.45.90-1
- 1.45.91-1
- 1.46.0-1
- 1.46.0-2
- 1.47.90-1
- 1.47.90-2
- 1.47.91-1
- 1.48.0-1
- 1.48.10-1
- 1.48.2-1
- 1.48.4-1
- 1.48.6-1
- 1.48.8-1
- 1.49.90-1
- 1.49.90-2
- 1.49.91-1
- 1.50.0-1
- 1.50.1-1
- 1.50.2-1
- 1.50.3-1
- 1.51.90-1
- 1.52.0-1
- 1.52.0-2
- 1.52.0-3
- 1.52.0-4
- 1.52.0-5
- 1.52.0-6
- 1.52.1-1
- 1.54.0-1
- 1.54.0-2
- 1.54.0-3
- 1.54.0-4
- 1.54.1-1
- 1.54.2-1
- 1.54.2-2
- 1.54.2-3
- 1.54.3-1
- 1.54.3-2
- 1.56.0-1
- 1.56.0-2
- 1.56.0-3
- 1.56.0-4
- 1.56.0-5
- 1.56.0-6
- 1.56.0-7
- 1.56.1-1
- 1.58.0-1
- 1.58.0-2
- 1.58.0-3
- 1.58.1-1
- 1.58~rc1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Debian:13
- Versions
- 1.52.1-1
- 1.54.0-1
- 1.54.0-2
- 1.54.0-3
- 1.54.0-4
- 1.54.1-1
- 1.54.2-1
- 1.54.2-2
- 1.54.2-3
- 1.54.3-1
- 1.54.3-2
- 1.56.0-1
- 1.56.0-2
- 1.56.0-3
- 1.56.0-4
- 1.56.0-5
- 1.56.0-6
- 1.56.0-7
- 1.56.1-1
- 1.58.0-1
- 1.58.0-2
- 1.58.0-3
- 1.58.1-1
- 1.58~rc1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Debian:14
- Versions
- 1.52.1-1
- 1.54.0-1
- 1.54.0-2
- 1.54.0-3
- 1.54.0-4
- 1.54.1-1
- 1.54.2-1
- 1.54.2-2
- 1.54.2-3
- 1.54.3-1
- 1.54.3-2
- 1.56.0-1
- 1.56.0-2
- 1.56.0-3
- 1.56.0-4
- 1.56.0-5
- 1.56.0-6
- 1.56.0-7
- 1.56.1-1
- 1.58.0-1
- 1.58~rc1-1
- Affected ranges
- ECOSYSTEM: < 1.58.0-2
Update to 1.58.0-2
network-manager Ubuntu:16.04:LTS
- Versions
- 1.0.4-0ubuntu5
- 1.0.4-0ubuntu6
- 1.0.4-0ubuntu7
- 1.0.4-0ubuntu8
- 1.0.4-0ubuntu9
- 1.0.4-0ubuntu10
- 1.1.93-0ubuntu2
- 1.1.93-0ubuntu3
- 1.1.93-0ubuntu4
- 1.2.0-0ubuntu0.16.04.2
- 1.2.0-0ubuntu0.16.04.3
- 1.2.2-0ubuntu0.16.04.1
- 1.2.2-0ubuntu0.16.04.3
- 1.2.2-0ubuntu0.16.04.4
- 1.2.6-0ubuntu0.16.04.1
- 1.2.6-0ubuntu0.16.04.2
- 1.2.6-0ubuntu0.16.04.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:18.04:LTS
- Versions
- 1.8.4-1ubuntu3
- 1.8.4-1ubuntu4
- 1.10.4-1ubuntu2
- 1.10.4-1ubuntu3
- 1.10.6-2ubuntu1
- 1.10.6-2ubuntu1.1
- 1.10.6-2ubuntu1.2
- 1.10.6-2ubuntu1.4
- 1.10.14-0ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:20.04:LTS
- Versions
- 1.20.4-2ubuntu2
- 1.20.4-2ubuntu3
- 1.20.8-1ubuntu2
- 1.22.4-1ubuntu2
- 1.22.8-1ubuntu1
- 1.22.10-1ubuntu1
- 1.22.10-1ubuntu2.1
- 1.22.10-1ubuntu2.2
- 1.22.10-1ubuntu2.3
- 1.22.10-1ubuntu2.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2026:58555
- https://access.redhat.com/errata/RHSA-2026:58572
- https://access.redhat.com/errata/RHSA-2026:61239
- https://access.redhat.com/errata/RHSA-2026:61243
- https://access.redhat.com/errata/RHSA-2026:61244
- https://access.redhat.com/errata/RHSA-2026:61341
- https://access.redhat.com/errata/RHSA-2026:61572
- https://access.redhat.com/errata/RHSA-2026:61580
- https://access.redhat.com/security/cve/CVE-2026-10805
- https://bugzilla.redhat.com/show_bug.cgi?id=2484613
- https://nvd.nist.gov/vuln/detail/CVE-2026-10805