{"schema_version":"1.7.2","id":"OESA-2026-2824","modified":"2026-07-06T06:26:51Z","published":"2026-07-06T06:26:51Z","upstream":["CVE-2026-10805"],"summary":"NetworkManager security update","details":"NetworkManager attempts to keep an active network connection available at all times.  The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.(CVE-2026-10805)","affected":[{"package":{"ecosystem":"openEuler:24.03-LTS-SP1","name":"NetworkManager","purl":"pkg:rpm/openEuler/NetworkManager&distro=openEuler-24.03-LTS-SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44.2-7.oe2403sp1"}]}],"ecosystem_specific":{"aarch64":["NetworkManager-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-bluetooth-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-cloud-setup-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-debuginfo-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-debugsource-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-libnm-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-libnm-devel-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-ppp-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-team-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-wifi-1.44.2-7.oe2403sp1.aarch64.rpm","NetworkManager-wwan-1.44.2-7.oe2403sp1.aarch64.rpm"],"noarch":["NetworkManager-config-server-1.44.2-7.oe2403sp1.noarch.rpm","NetworkManager-help-1.44.2-7.oe2403sp1.noarch.rpm"],"src":["NetworkManager-1.44.2-7.oe2403sp1.src.rpm"],"x86_64":["NetworkManager-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-bluetooth-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-cloud-setup-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-debuginfo-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-debugsource-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-libnm-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-libnm-devel-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-ppp-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-team-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-wifi-1.44.2-7.oe2403sp1.x86_64.rpm","NetworkManager-wwan-1.44.2-7.oe2403sp1.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2824"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10805"}],"database_specific":{"severity":"Medium"}}