RHSA-2026:58555: Moderate: NetworkManager security update
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.Security Fix(es): NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running NetworkManager with the dhclient backend are potentially exposed, because the flaw is a local privilege-escalation issue in handling malformed MUD URLs.
What access does an attacker need to exploit it?
The issue is described as local privilege escalation, so the attacker needs local access or an existing foothold on the affected system. The provided advisory does not specify the exact privileges required before exploitation.
Is a default NetworkManager installation affected?
The available information identifies the dhclient backend as the affected component, but it does not state whether that backend is enabled or used by default. Verify whether NetworkManager on the system uses dhclient.