Medium severity6.7NVD Advisory· Published Jun 4, 2026· Updated Aug 31, 2026
CVE-2026-10805
CVE-2026-10805
Description
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- osv-coords16 versionspkg:rpm/almalinux/NetworkManagerpkg:rpm/almalinux/NetworkManager-adslpkg:rpm/almalinux/NetworkManager-bluetoothpkg:rpm/almalinux/NetworkManager-cloud-setuppkg:rpm/almalinux/NetworkManager-config-connectivity-redhatpkg:rpm/almalinux/NetworkManager-config-serverpkg:rpm/almalinux/NetworkManager-dispatcher-routing-rulespkg:rpm/almalinux/NetworkManager-initscripts-updownpkg:rpm/almalinux/NetworkManager-libnmpkg:rpm/almalinux/NetworkManager-libnm-develpkg:rpm/almalinux/NetworkManager-ovspkg:rpm/almalinux/NetworkManager-ppppkg:rpm/almalinux/NetworkManager-teampkg:rpm/almalinux/NetworkManager-tuipkg:rpm/almalinux/NetworkManager-wifipkg:rpm/almalinux/NetworkManager-wwan
< 1:1.40.16-21.el8_10+ 15 more
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
- (no CPE)range: < 1:1.40.16-21.el8_10
Patches
Vulnerability mechanics
References
10- access.redhat.com/errata/RHSA-2026:58555nvd
- access.redhat.com/errata/RHSA-2026:58572nvd
- access.redhat.com/errata/RHSA-2026:61239nvd
- access.redhat.com/errata/RHSA-2026:61243nvd
- access.redhat.com/errata/RHSA-2026:61244nvd
- access.redhat.com/errata/RHSA-2026:61341nvd
- access.redhat.com/errata/RHSA-2026:61572nvd
- access.redhat.com/errata/RHSA-2026:61580nvd
- access.redhat.com/security/cve/CVE-2026-10805nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.