Gnome Networkmanager-Vpnc vulnerabilities

2 CVEs affecting Gnome Networkmanager-Vpnc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-91841, published 2026-09-25.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-91841, published 2026-09-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This…
• CVE-2026-91840, published 2026-09-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker…