Dashboard / CVE-2025-9615

CVE-2025-9615

LOW
INFO Priority: 0.01 BB Relevance: 32/100
Published: 2026-01-26 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

Weakness Classification (1)

References & Advisories (7)

https://access.redhat.com/errata/RHSA-2026:18142
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18597
vendor-advisory x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2391503
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.16%
Raw Score 0.001590
Percentile 5.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00159
2026-11-12
0.00159
2026-11-10
0.00159
2026-11-09
0.00159
2026-11-08
0.00159
2026-11-07
0.00159
2026-11-06
0.00159

Intelligence Sources

mitre ref →
nvd ref →

External Links