Skip to content
OpenAdvisories

Package · Debian

network-manager-sstp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2026-91838

    Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields

    A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate…

    GNOME NetworkManager-sstp network-manager-sstp network-manager-sstp Debian Ubuntu