PT-2026-46143 · Unknown · Networkmanager

Osidb Bzimport · CVE-2026-10805 · Published 2026-06-04 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetworkManager (affected versions not specified)

Description A flaw in the dhclient backend of NetworkManager allows for local privilege escalation. The issue occurs when processing malformed Manufacturer Usage Description (MUD) URLs, which are used to provide devices with information about the network services they need. A local user can trigger a script via a crafted MUD URL to gain elevated privileges, but only if an administrator has explicitly configured NetworkManager to use dhclient. Default configurations are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-10805

OESA-2026-2822

OESA-2026-2823

OESA-2026-2824

OESA-2026-2825

OESA-2026-3038

Affected Products

Networkmanager

References · 21

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-10805 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-10805 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2822 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2825 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-10805 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-10805 · Security Note
• https://ubuntu.com/security/CVE-2026-10805 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2823 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2824 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-10805 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-3038 · Vendor Advisory
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2823 · Note
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2825 · Note
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2824 · Note
• https://t.me/CVEtracker/55794 · Telegram Post