What is RHSA-2026:61580?

RHSA-2026:61580 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: NetworkManager security update

Which CVE IDs does RHSA-2026:61580 cover?

RHSA-2026:61580 covers the following CVE IDs: CVE-2026-10805. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:61580?

RHSA-2026:61580 has a CVSS v3 base score of 6.7, published by Red Hat Product Security.

Which products are affected by RHSA-2026:61580?

RHSA-2026:61580 affects 110 products, including: Red Hat Enterprise Linux AppStream AUS (v.8.6); Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6); Red Hat Enterprise Linux BaseOS AUS (v.8.6); Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6); NetworkManager-1:1.36.0-18.el8_6.1.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6); and others — see the full list on the advisory page.

RHSA-2026:61580MediumCVSS 6.7

Red Hat Security Advisory: NetworkManager security update

Vendor

Red Hat Product Security

Published

August 31, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-10805 →

📋 Description

CVE-2026-10805 — NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend

🎯 Affected products110

Red Hat Enterprise Linux AppStream AUS (v.8.6)
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
Red Hat Enterprise Linux BaseOS AUS (v.8.6)
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-1:1.36.0-18.el8_6.1.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-1:1.36.0-18.el8_6.1.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-adsl-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-adsl-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-adsl-debuginfo-1:1.36.0-18.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-adsl-debuginfo-1:1.36.0-18.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-adsl-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)
NetworkManager-adsl-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
NetworkManager-adsl-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-adsl-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-bluetooth-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-bluetooth-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-bluetooth-debuginfo-1:1.36.0-18.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-bluetooth-debuginfo-1:1.36.0-18.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-bluetooth-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)
NetworkManager-bluetooth-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
NetworkManager-bluetooth-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-bluetooth-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-cloud-setup-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)
NetworkManager-cloud-setup-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
NetworkManager-cloud-setup-debuginfo-1:1.36.0-18.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)
NetworkManager-cloud-setup-debuginfo-1:1.36.0-18.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
NetworkManager-cloud-setup-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)
NetworkManager-cloud-setup-debuginfo-1:1.36.0-18.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
+80 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To prevent exploitation, ensure NetworkManager is not configured to use the `dhclient` backend. The default configuration on Red Hat Enterprise Linux does not enable `dhclient`. If a custom configuration file, such as `/etc/NetworkManager/conf.d/00-dhcp.conf`, contains `[main] dhcp=dhclient`, remove or comment out this line. After modifying the configuration, restart the NetworkManager service: `sudo systemctl restart NetworkManager` Warning: Restarting the NetworkManager service will temporarily disrupt network connectivity.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products110

✅ Remediation

🔗 References (4)