An update for NetworkManager is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-2825 Final 1.0 1.0 2026-07-06 Initial 2026-07-06 2026-07-06 openEuler SA Tool V1.0 2026-07-06 NetworkManager security update An update for NetworkManager is now available for openEuler-24.03-LTS-SP3 NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit. Security Fix(es): A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.(CVE-2026-10805) An update for NetworkManager is now available for openEuler-24.03-LTS-SP3. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium NetworkManager https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2825 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-10805 https://nvd.nist.gov/vuln/detail/CVE-2026-10805 openEuler-24.03-LTS-SP3 NetworkManager-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-bluetooth-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-cloud-setup-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-debuginfo-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-debugsource-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-libnm-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-libnm-devel-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-ppp-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-team-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-wifi-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-wwan-1.44.2-7.oe2403sp3.aarch64.rpm NetworkManager-1.44.2-7.oe2403sp3.src.rpm NetworkManager-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-bluetooth-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-cloud-setup-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-debuginfo-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-debugsource-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-libnm-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-libnm-devel-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-ppp-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-team-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-wifi-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-wwan-1.44.2-7.oe2403sp3.x86_64.rpm NetworkManager-config-server-1.44.2-7.oe2403sp3.noarch.rpm NetworkManager-help-1.44.2-7.oe2403sp3.noarch.rpm A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager. 2026-07-06 CVE-2026-10805 openEuler-24.03-LTS-SP3 Medium 6.7 AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H NetworkManager security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2825