OESA-2026-3662

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3662
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3662.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3662
Upstream
Published
2026-09-05T15:03:39Z
Modified
2026-09-05T15:16:34Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
NetworkManager security update
Details

NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit.

Security Fix(es):

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.(CVE-2026-19685)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:24.03-LTS-SP1 / NetworkManager

Package

Name
NetworkManager
Purl
pkg:rpm/openEuler/NetworkManager&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.44.2-9.oe2403sp1

Ecosystem specific 

{
    "aarch64": [
        "NetworkManager-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-bluetooth-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-cloud-setup-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-debuginfo-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-debugsource-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-libnm-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-libnm-devel-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-ppp-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-team-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-wifi-1.44.2-9.oe2403sp1.aarch64.rpm",
        "NetworkManager-wwan-1.44.2-9.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "NetworkManager-config-server-1.44.2-9.oe2403sp1.noarch.rpm",
        "NetworkManager-help-1.44.2-9.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "NetworkManager-1.44.2-9.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "NetworkManager-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-bluetooth-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-cloud-setup-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-debuginfo-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-debugsource-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-libnm-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-libnm-devel-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-ppp-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-team-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-wifi-1.44.2-9.oe2403sp1.x86_64.rpm",
        "NetworkManager-wwan-1.44.2-9.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3662.json"