NetworkManager-l2tp vulnerabilities
CVEs whose affected-version data names the NetworkManager-l2tp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-93337High· 7.8NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-…
NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-…
▾ Twilightnm-l2tp · NetworkManager-l2tpEPSS 0.15%via NVD
CVE-2026-19624High· 7.8A flaw was found in NetworkManager-l2tp
A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets values) unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged user can…
▾ TwilightFedora · NetworkManager-l2tpEPSS 0.13%via NVD