Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: nm-l2tp Clear all filters
TI-2026-52786 CVE-2026-75131

NetworkManager-l2tp Privilege Escalation via pppd Username Injection

Priority HIGH 72

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd opt…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00178 Published 2026-09-23 Fixed in 1.52.6 CWE-88
TI-2026-62929 CVE-2026-93337

NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

Priority LOW 38

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying m…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00148 Published 2026-09-17 Fixed in 1.52.6 CWE-88