{"id":11412,"date":"2026-09-04T18:53:14","date_gmt":"2026-09-04T10:53:14","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-19685"},"modified":"2026-09-04T18:53:14","modified_gmt":"2026-09-04T10:53:14","slug":"cve-2026-19685","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-19685","title":{"rendered":"CVE-2026-19685 [HIGH] &#8211; NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2"},"content":{"rendered":"<p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile&#8217;s CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11412","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}