Gravitl Netmaker vulnerabilities

• gravitl netmaker Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup CVE-2026-115325 8.7 HighOctober 22, 2026
• gravitl netmaker Netmaker has a boolean‑based SQL Injection CVE-2026-32599 Fix available 5.3 MediumSeptember 15, 2026
• gravitl netmaker Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client CVE-2026-81034 8.3 HighAugust 26, 2026
• gravitl netmaker Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys CVE-2026-29196 Fix available 8.7 HighMarch 7, 2026
• gravitl netmaker Netmaker: Privilege Escalation from Admin to Super-Admin via User Update CVE-2026-29195 Fix available 6.9 MediumMarch 7, 2026
• gravitl netmaker Netmaker: Insufficient Authorization in Host Token Verification CVE-2026-29194 Fix available 8.6 HighMarch 7, 2026
• gravitl netmaker Netmaker: Denial of Service via Server Shutdown Endpoint CVE-2026-29771 Fix available 8.7 HighMarch 4, 2026
• gravitl netmaker Netmaker Privilige Escalation Vulnerability CVE-2023-32079 Fix available 8.8 HighAugust 24, 2023
• gravitl netmaker Netmaker IDOR Vulnerability Allows User to Update Other User's Password CVE-2023-32078 Fix available 7.5 HighAugust 24, 2023
• gravitl netmaker Netmaker has Hardcoded DNS Secret Key CVE-2023-32077 Fix available 7.5 HighAugust 24, 2023
• gravitl netmaker Netmaker vulnerable to Insufficient Granularity of Access Control CVE-2022-36110 Fix available 8.8 HighSeptember 9, 2022
• gravitl netmaker Use of Hard-coded Cryptographic Key in Netmaker CVE-2022-23650 Fix available 7.2 HighFebruary 18, 2022
• gravitl gravitl/netmaker, netmaker +1 more Use of Hard-coded Cryptographic Key in gravitl/netmaker CVE-2022-0664 Fix available 8.8 HighFebruary 18, 2022