CVE-2026-10805— Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 26
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Multicluster Engine for Kubernetes | any | affected |
| Red Hat | Red Hat Enterprise Linux 10 | any | affected |
any | affected | ||
any | affected | ||
any | affected | ||
| Red Hat | Red Hat Enterprise Linux 6 | any | affected |
any | affected | ||
| Red Hat | Red Hat Enterprise Linux 7 | any | affected |
any | affected | ||
| Red Hat | Red Hat Enterprise Linux 8 | any | affected |
any | affected | ||
| Red Hat | Red Hat Enterprise Linux 9 | any | affected |
any | affected | ||
any | affected | ||
any | affected | ||
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | any | affected |
| Red Hat | Red Hat OpenShift Container Platform 4 | any | affected |
any | affected | ||
any | affected | ||
any | affected | ||
any | affected | ||
any | affected | ||
any | affected | ||
any | affected | ||
| … +2 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10805
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
NetworkManager 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NetworkManager是NetworkManager开源的一款网络管理守护程序。 NetworkManager存在操作系统命令注入漏洞，该漏洞源于dhclient后端处理格式错误的Manufacturer Usage Description URL时存在本地权限提升问题，可能导致本地用户通过特制MUD URL触发脚本提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-10805
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10805
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-10805 (2)
Same Patch Batch · Red Hat · 2026-06-04 · 3 CVEs total
| CVE-2026-10843 | 7.2 HIGH | Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide i |
| CVE-2026-10840 | 7.1 HIGH | Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebindin |
IV. Related Vulnerabilities
Same vendor: Red Hat
- CVE-2026-12726
Awx: automation-controller: awx: github webhook second-order - CVE-2026-56211
Libaom: libaom: remote code execution via svc layer context - CVE-2026-56210
Libaom: libaom: heap-buffer-overflow read via missing bounds - CVE-2026-56209
Libaom: libaom: arbitrary address write via svc layer contex - CVE-2026-56208
Libaom: libaom: heap buffer overflow in av1 encoder first-pa
Same weakness: CWE-78
V. Comments for CVE-2026-10805
No comments yet