Threats Tagged 'cve-2026-19685'

This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696). - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation bypass (bsc#1276764).

This security update for NetworkManager addresses two vulnerabilities: CVE-2026-10805, a local privilege escalation via malformed MUD URLs in the dhclient backend, and CVE-2026-19685, a missing user ownership check for 802.1X directory properties that can allow WPA-Enterprise server certificate validation bypass. The update is rated with high severity and affects certain versions of NetworkManager in SUSE and Red Hat Enterprise Linux 9 distributions.

CVE-2026-19685 is a vulnerability in NetworkManager on Red Hat Enterprise Linux 10 that allows an unprivileged local user with specific permissions to bypass server certificate validation for WPA-Enterprise (802.1X) connections. This flaw is due to an incomplete fix of a previous vulnerability (CVE-2025-9615) where the private_user restriction was not applied to certain 802.1x CA path properties. Exploitation requires an active local user session with settings.modify.own polkit permission. The vulnerability enables credential theft via a rogue access point but does not affect open or WPA2-Personal networks.