Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for NetworkManager-vpnc by GNOME

    CVE-2026-91841 (GCVE-0-2026-91841)

    Vulnerability from nvd – Published: 2026-09-25 17:56 – Updated: 2026-09-26 03:55
    VLAI
    Title
    Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection
    Summary
    A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-25 00:00 UTC
    CWE
    • CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
    Impacted products
    Vendor Product Version
    GNOME NetworkManager-vpnc Affected: 0 , < * (semver)
    Create a notification for this product.
    Date Public
    2026-09-15 09:55
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-91841",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-25T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-26T03:55:52.246Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/20"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://gitlab.gnome.org/GNOME/NetworkManager-vpnc",
              "defaultStatus": "unaffected",
              "packageName": "network-manager-vpnc",
              "product": "NetworkManager-vpnc",
              "vendor": "GNOME",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Andreas Gabriel Berbescu for reporting this issue."
            }
          ],
          "datePublic": "2026-09-15T09:55:49.970Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-93",
                  "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-25T17:56:34.223Z",
            "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
            "shortName": "fedora"
          },
          "references": [
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-91841"
            },
            {
              "name": "RHBZ#2533651",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533651"
            },
            {
              "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/20"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-15T09:55:49.970Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-09-15T09:55:49.970Z",
              "value": "Made public."
            }
          ],
          "title": "Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection",
          "workarounds": [
            {
              "lang": "en",
              "value": "To mitigate this issue, remove the `NetworkManager-vpnc` package if the vpnc VPN plugin functionality is not required on the system. This will prevent a local unprivileged user from exploiting the flaw.\nTo remove the package, use the following command:\n`sudo dnf remove NetworkManager-vpnc`\nNote that removing this package will disable the ability to use vpnc-based VPN connections."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "assignerShortName": "fedora",
        "cveId": "CVE-2026-91841",
        "datePublished": "2026-09-25T17:56:34.223Z",
        "dateReserved": "2026-09-15T08:28:01.333Z",
        "dateUpdated": "2026-09-26T03:55:52.246Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-91840 (GCVE-0-2026-91840)

    Vulnerability from nvd – Published: 2026-09-25 17:56 – Updated: 2026-09-26 03:55
    VLAI
    Title
    Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username
    Summary
    A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-25 00:00 UTC
    CWE
    • CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
    Impacted products
    Vendor Product Version
    GNOME NetworkManager-vpnc Affected: 0 , < * (semver)
    Create a notification for this product.
    Date Public
    2026-09-15 09:50
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-91840",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-25T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-26T03:55:52.959Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/19"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://gitlab.gnome.org/GNOME/NetworkManager-vpnc",
              "defaultStatus": "unaffected",
              "packageName": "network-manager-vpnc",
              "product": "NetworkManager-vpnc",
              "vendor": "GNOME",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Andreas Gabriel Berbescu for reporting this issue."
            }
          ],
          "datePublic": "2026-09-15T09:50:37.313Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-93",
                  "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-25T17:56:32.736Z",
            "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
            "shortName": "fedora"
          },
          "references": [
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-91840"
            },
            {
              "name": "RHBZ#2533642",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533642"
            },
            {
              "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/19"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-15T09:50:37.313Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-09-15T09:50:37.313Z",
              "value": "Made public."
            }
          ],
          "title": "Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username",
          "workarounds": [
            {
              "lang": "en",
              "value": "If vpnc VPN connections are not required, the NetworkManager-vpnc package can be removed to eliminate the vulnerability. This action will prevent the system from establishing vpnc-based VPN connections.\n\nTo remove the package, execute the following command as root:\n`# dnf remove NetworkManager-vpnc`\n\nNote that removing this package may impact functionality if vpnc VPNs are actively used."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "assignerShortName": "fedora",
        "cveId": "CVE-2026-91840",
        "datePublished": "2026-09-25T17:56:32.736Z",
        "dateReserved": "2026-09-15T08:28:01.333Z",
        "dateUpdated": "2026-09-26T03:55:52.959Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-91841 (GCVE-0-2026-91841)

    Vulnerability from cvelistv5 – Published: 2026-09-25 17:56 – Updated: 2026-09-26 03:55
    VLAI
    Title
    Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection
    Summary
    A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-25 00:00 UTC
    CWE
    • CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
    Impacted products
    Vendor Product Version
    GNOME NetworkManager-vpnc Affected: 0 , < * (semver)
    Create a notification for this product.
    Date Public
    2026-09-15 09:55
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-91841",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-25T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-26T03:55:52.246Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/20"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://gitlab.gnome.org/GNOME/NetworkManager-vpnc",
              "defaultStatus": "unaffected",
              "packageName": "network-manager-vpnc",
              "product": "NetworkManager-vpnc",
              "vendor": "GNOME",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Andreas Gabriel Berbescu for reporting this issue."
            }
          ],
          "datePublic": "2026-09-15T09:55:49.970Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-93",
                  "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-25T17:56:34.223Z",
            "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
            "shortName": "fedora"
          },
          "references": [
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-91841"
            },
            {
              "name": "RHBZ#2533651",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533651"
            },
            {
              "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/20"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-15T09:55:49.970Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-09-15T09:55:49.970Z",
              "value": "Made public."
            }
          ],
          "title": "Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection",
          "workarounds": [
            {
              "lang": "en",
              "value": "To mitigate this issue, remove the `NetworkManager-vpnc` package if the vpnc VPN plugin functionality is not required on the system. This will prevent a local unprivileged user from exploiting the flaw.\nTo remove the package, use the following command:\n`sudo dnf remove NetworkManager-vpnc`\nNote that removing this package will disable the ability to use vpnc-based VPN connections."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "assignerShortName": "fedora",
        "cveId": "CVE-2026-91841",
        "datePublished": "2026-09-25T17:56:34.223Z",
        "dateReserved": "2026-09-15T08:28:01.333Z",
        "dateUpdated": "2026-09-26T03:55:52.246Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-91840 (GCVE-0-2026-91840)

    Vulnerability from cvelistv5 – Published: 2026-09-25 17:56 – Updated: 2026-09-26 03:55
    VLAI
    Title
    Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username
    Summary
    A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-25 00:00 UTC
    CWE
    • CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
    Impacted products
    Vendor Product Version
    GNOME NetworkManager-vpnc Affected: 0 , < * (semver)
    Create a notification for this product.
    Date Public
    2026-09-15 09:50
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-91840",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-25T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-26T03:55:52.959Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/19"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://gitlab.gnome.org/GNOME/NetworkManager-vpnc",
              "defaultStatus": "unaffected",
              "packageName": "network-manager-vpnc",
              "product": "NetworkManager-vpnc",
              "vendor": "GNOME",
              "versions": [
                {
                  "lessThan": "*",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Red Hat would like to thank Andreas Gabriel Berbescu for reporting this issue."
            }
          ],
          "datePublic": "2026-09-15T09:50:37.313Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "namespace": "https://access.redhat.com/security/updates/classification/",
                  "value": "Important"
                },
                "type": "Red Hat severity rating"
              }
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-93",
                  "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-25T17:56:32.736Z",
            "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
            "shortName": "fedora"
          },
          "references": [
            {
              "tags": [
                "vdb-entry",
                "x_refsource_REDHAT"
              ],
              "url": "https://access.redhat.com/security/cve/CVE-2026-91840"
            },
            {
              "name": "RHBZ#2533642",
              "tags": [
                "issue-tracking",
                "x_refsource_REDHAT"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533642"
            },
            {
              "url": "https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/19"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-15T09:50:37.313Z",
              "value": "Reported to Red Hat."
            },
            {
              "lang": "en",
              "time": "2026-09-15T09:50:37.313Z",
              "value": "Made public."
            }
          ],
          "title": "Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username",
          "workarounds": [
            {
              "lang": "en",
              "value": "If vpnc VPN connections are not required, the NetworkManager-vpnc package can be removed to eliminate the vulnerability. This action will prevent the system from establishing vpnc-based VPN connections.\n\nTo remove the package, execute the following command as root:\n`# dnf remove NetworkManager-vpnc`\n\nNote that removing this package may impact functionality if vpnc VPNs are actively used."
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_redhatCweChain": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "assignerShortName": "fedora",
        "cveId": "CVE-2026-91840",
        "datePublished": "2026-09-25T17:56:32.736Z",
        "dateReserved": "2026-09-15T08:28:01.333Z",
        "dateUpdated": "2026-09-26T03:55:52.959Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }