Linuxsecurity SUSE NetworkManager Vulnerabilities Lead to Important Local Privilege Escalation Fixes
Article Content
- •Two critical vulnerabilities in SUSE NetworkManager have been patched.
- •CVE-2026-10805 and CVE-2026-19685 affect SUSE Linux Micro versions 6.0 and 6.2.
- •Immediate patching is recommended to prevent potential exploitation.
SUSE has released updates for NetworkManager addressing two critical vulnerabilities: CVE-2026-10805 and CVE-2026-19685. CVE-2026-10805 allows local privilege escalation through malformed MUD URLs in the dhclient backend, while CVE-2026-19685 permits a bypass of WPA-Enterprise server certificate validation due to missing user ownership checks for 802.1X directory properties. Both vulnerabilities affect SUSE Linux Micro versions 6.0 and 6.2. The patches are available via SUSE's recommended installation methods, including YaST and zypper. The vulnerabilities were published on June 4 and August 24, 2026, respectively. Security professionals are urged to apply the patches as soon as possible to mitigate risks. The updates are rated as important, indicating a significant threat to affected systems.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track CVE-2026-10805 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…