gravitl

Products

ProductCVEsExploitedLatest
netmaker12–Oct 22, 2026
gravitl/netmaker1–Feb 18, 2022

Exploited and recent CVEs

  • CVE-2026-115325 High 8.3 Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup 0.4%
  • CVE-2026-32599 Medium 5.3 Netmaker has a boolean‑based SQL Injection 0.4%
  • CVE-2026-81034 Medium 6.5 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client 0.3%
  • CVE-2026-29196 High 8.7 Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys 0.3%
  • CVE-2026-29195 Medium 6.9 Netmaker: Privilege Escalation from Admin to Super-Admin via User Update 0.3%
  • CVE-2026-29194 High 8.6 Netmaker: Insufficient Authorization in Host Token Verification 0.5%
  • CVE-2026-29771 High 8.7 Netmaker: Denial of Service via Server Shutdown Endpoint 0.4%
  • CVE-2023-32079 High 8.8 Netmaker Privilige Escalation Vulnerability 0.9%
  • CVE-2023-32078 High 7.5 Netmaker IDOR Vulnerability Allows User to Update Other User's Password 0.7%
  • CVE-2023-32077 High 7.5 Netmaker has Hardcoded DNS Secret Key 3.5%
  • CVE-2022-36110 High 8.8 Netmaker vulnerable to Insufficient Granularity of Access Control 0.9%
  • CVE-2022-23650 High 7.2 Use of Hard-coded Cryptographic Key in Netmaker 1.6%
  • CVE-2022-0664 High 8.8 Use of Hard-coded Cryptographic Key in gravitl/netmaker 1.7%