NetworkManager-vpnc vulnerabilities

2 known vulnerabilities in NetworkManager-vpnc from GNOME. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  NetworkManager-vpnc: Improper Neutralization of CRLF Sequences

  CVE-2026-91841Sep 25, 2026GNOME

  A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the ro

• 7.8 High severity

  NetworkManager-vpnc: Improper Neutralization of CRLF Sequences

  CVE-2026-91840Sep 25, 2026GNOME

  A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary