Vulnerabilidades do Gnome NetworkManager-vpnc
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Gnome NetworkManager-vpnc: 2 registro(s), com versões afetadas e correções.
CVE-2026-91841
Alta · 7.8
CWE-93 25/09/2026
Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection
A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.
CVE-2026-91840
Alta · 7.8
CWE-93 25/09/2026
Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.