A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-initscripts-updownUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManagerUpgrade NetworkManager-pppUpgrade NetworkManager-teamUpgrade NetworkManager-tuiUpgrade NetworkManager-config-serverUpgrade NetworkManager-libnmUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ovsUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adsl | Oct 11, 2026 | Aug 24, 2026 |
| Redhat_linux | — | Upgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-libnm-develUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wifiUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-pppUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-initscripts-updown | Jul 17, 2026 | Jun 4, 2026 |
| Rocky_linux | — | Upgrade NetworkManager-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-tuiUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-wwanUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-adslUpgrade NetworkManager-wifiUpgrade NetworkManager-libnmUpgrade NetworkManager | Aug 26, 2026 | Aug 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub