CVE-2026-19685
Fixed in a distro release EPSS <1%CVSS 7.1
NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.
Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 14 | network-manager | 1.58.1-1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | NetworkManager | 1.32.12-150400.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | NetworkManager | 1.32.12-150400.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | NetworkManager | 1.38.6-150500.3.10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | NetworkManager | 1.38.6-150500.3.10.1 |
| SUSE Linux Enterprise Micro 5.3 | NetworkManager | 1.38.2-150400.3.8.1 |
| SUSE Linux Enterprise Micro 5.4 | NetworkManager | 1.38.2-150400.3.9.1 |
| SUSE Linux Enterprise Micro 5.5 | NetworkManager | 1.38.6-150500.3.10.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | NetworkManager | 1.44.2-150600.3.10.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | NetworkManager | 1.44.2-150600.3.10.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | NetworkManager | 1.32.12-150400.3.6.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | NetworkManager | 1.38.6-150500.3.10.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | NetworkManager | 1.44.2-150600.3.10.1 |
| SUSE Linux Enterprise Server 16.0 | NetworkManager | 1.52.0-160000.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | NetworkManager | 1.32.12-150400.3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | NetworkManager | 1.38.6-150500.3.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | NetworkManager | 1.44.2-150600.3.10.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | NetworkManager | 1.52.0-160000.5.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | NetworkManager | 1.44.2-150600.3.10.1 |
| SUSE Linux Micro 6.0 | NetworkManager | 1.42.6-9.1 |
| SUSE Linux Micro 6.1 | NetworkManager | 1.42.6-slfo.1.1_5.1 |
| SUSE Linux Micro 6.2 | NetworkManager | 1.52.0-160000.5.1 |
| Ubuntu 26.04 LTS | network-manager | 1.54.3-2ubuntu3.1 |
| openSUSE Leap 16.0 | NetworkManager | 1.52.0-160000.5.1 |
| openSUSE Tumbleweed | NetworkManager | 1.56.1-4.1 |