Search: CVE-2026-19685

CVE-2026-19685 is a vulnerability in NetworkManager on Red Hat Enterprise Linux 10 that allows an unprivileged local user with specific permissions to bypass server certificate validation for WPA-Enterprise (802.1X) connections. This flaw is due to an incomplete fix of a previous vulnerability (CVE-2025-9615) where the private_user restriction was not applied to certain 802.1x CA path properties. Exploitation requires an active local user session with settings.modify.own polkit permission. The vulnerability enables credential theft via a rogue access point but does not affect open or WPA2-Personal networks.