Read the docs

nm-l2tp

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nm-l2tp records in CISA KEV

No nm-l2tp vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-52786 CVE-2026-75131

NetworkManager-l2tp Privilege Escalation via pppd Username Injection

Priority HIGH 72

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd opt…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00178 Published 2026-09-23 Fixed in 1.52.6 CWE-88
TI-2026-62929 CVE-2026-93337

NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

Priority LOW 38

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying m…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00148 Published 2026-09-17 Fixed in 1.52.6 CWE-88
Open these records in search →