CVE-2026-93337

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 18, 2026

Last Seen

September 18, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVE-2026-93337 in NetworkManager-l2tp Allows Root Code Execution66.5

A vulnerability identified as CVE-2026-93337 in NetworkManager-l2tp permits local users to exploit improper input validation of VPN properties, specifically mru and mtu. This flaw enables attackers to inject arbitrary pppd directives, leading to arbitrary code execution with root privileges. The iss...