Networkmanager

This hub aggregates every CVE we track for Networkmanager, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Networkmanager.

• CVE-2025-9615Networkmanager: networkmanager file access3.3Jan 26, 2026
• CVE-2024-9050Networkmanager-libreswan: local privilege escalation via leftupdown7.8Oct 22, 2024
• CVE-2024-6501Networkmanager: denial of service3.1Jul 9, 2024
• CVE-2021-20297A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.5.5May 26, 2021
• CVE-2020-10754It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network ...4.3Jun 8, 2020
• CVE-2012-1096NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.5.5Mar 10, 2020
• CVE-2006-7246NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.6.8Jan 27, 2020
• CVE-2012-2736In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.4.4Dec 26, 2019
• CVE-2018-1000135GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers,...7.5Mar 20, 2018
• CVE-2016-0764Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Lin...6.2Jul 14, 2017
• CVE-2015-0272GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability t...5.0Nov 17, 2015
• CVE-2015-2924The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit se...3.3Nov 16, 2015
• CVE-2011-2176GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified ve...2.1Sep 2, 2011
• CVE-2011-1943The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allow...2.1Jun 14, 2011
• CVE-2009-4144NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt,...6.8Dec 23, 2009