Gnome Networkmanager Vpnc vulnerabilities

2 vulnerabilities

Known vulnerabilities in Gnome Networkmanager Vpnc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2026-91841debiannetwork-manager-vpnc+2
EPSS score
0.19%
A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.7.8CVE-2026-91840debiannetwork-manager-vpnc+2
EPSS score
0.19%
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.