Back Linuxsecurity

Fedora 43 NetworkManager-iodine Security Advisory CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

This package contains software for integrating VPN capabilities with

the iodine server and NetworkManager.

* Sun Sep 20 2026 Dan Fruehauf - 1.2.0-29 - Fix CVE-2026-91837

[ 1 ] Bug #2533685 - CVE-2026-91837 NetworkManager-iodine: NetworkManager-iodine: local privilege escalation to root via nameserver option injection [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d3a0471c75' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE Fixes for Fedora NetworkManager Plugins Released On September 29, 2026, Fedora released critical updates for NetworkManager-l2tp and NetworkManager-iodine plugins to address vulnerabilities CVE-2026-75131, CVE-2026-93337, and CVE-2026-91837. These vulnerabilities could allow local privilege escalation and exploitation of firewall flaws, affecting Fedora 43, 44, and 45 systems. CISA confirmed that these issues are being actively exploited in the wild, prompting urgent action from system administrators. Users are advised to apply the updates immediately using the dnf package manager. The updates were published in response to confirmed exploitation attempts targeting these vulnerabilities. The patches are crucial for maintaining the security of VPN connections integrated with NetworkManager. 5 sources 76

Extracted Entities

Fedora 43 NetworkManager-iodine Security Advisory CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)