Skip to content
OpenAdvisories
High USN-8806-1 1 CVE

network-manager vulnerability

Published Sep 23, 2026 · Updated Sep 24, 2026

Ecosystem: Ubuntu

Summary

It was discovered that NetworkManager did not properly restrict the
ca-path and phase2-ca-path certificate authority settings for private
(single-user) 802.1X network connections. An attacker could use this issue
to point their own private 802.1X connection profile at a directory under
their control, causing NetworkManager to trust an attacker-chosen
certificate authority and potentially exposing network credentials via a
rogue authentication server.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS network-manager 1.54.3-2ubuntu3.1

Vulnerabilities 1

  • High 7.1
    CVE-2026-19685

    Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

    NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) conne…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-19685