CVE-2026-91838 | GNOME NetworkManager SSTP VPN Plugin os command injection

September 25, 2026 Yanac

A vulnerability has been found in GNOME NetworkManager and classified as very critical. Affected by this vulnerability is an unknown functionality of the component SSTP VPN Plugin. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2026-91838. An attack has to be approached locally. There is no exploit available.VulDB Recent EntriesRead More