https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 05:20:35 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-19685 <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#39;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.</p> <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#39;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.</p> https://db.gcve.eu/vuln/fkie_cve-2026-19685 https://db.gcve.eu/vuln/ghsa-xpm4-qfqg-g2wr <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#39;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.</p> <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#39;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.</p> https://db.gcve.eu/vuln/ghsa-xpm4-qfqg-g2wr https://db.gcve.eu/vuln/oesa-2026-3661 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: NetworkManager</p> <p>NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit. Security Fix(es):</p> <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&amp;apos;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.(CVE-2026-19685)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: NetworkManager</p> <p>NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit. Security Fix(es):</p> <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&amp;apos;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.(CVE-2026-19685)</p> https://db.gcve.eu/vuln/oesa-2026-3661 https://db.gcve.eu/vuln/opensuse-su-2026:11693-1 <p>NetworkManager-1.56.1-4.1 on GA media</p> <p>NetworkManager-1.56.1-4.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:11693-1 https://db.gcve.eu/vuln/suse-su-2026:23475-1 <p>Security update for NetworkManager</p> <p>Security update for NetworkManager</p> https://db.gcve.eu/vuln/suse-su-2026:23475-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-19685 <p><strong>Affected:</strong> Ubuntu:26.04:LTS: network-manager</p> <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#39;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.</p> <p><strong>Affected:</strong> Ubuntu:26.04:LTS: network-manager</p> <p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#39;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-19685