Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Netmaker HIGH 8.2
CVE-2026-38651

Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to validate the J…

Fix: 1.5.0+
Fix from $1,950 2026-04-28
Netmaker MEDIUM 6.5
CVE-2026-29771

Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process v…

Fix: 1.2.0+
Fix from $1,600 2026-03-07
Netmaker HIGH 8.8
CVE-2023-32079

Netmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user…

Fix: 0.17.1+
Fix from $1,950 2023-08-24
Netmaker HIGH 7.5
CVE-2023-32078

Netmaker makes networks with WireGuard. An Insecure Direct Object Reference (IDOR) vulnerability was found in versions prior to 0.17.1 and 0.18.6 in …

Fix: 0.17.1+
Fix from $1,950 2023-08-24
Netmaker HIGH 7.5
CVE-2023-32077

Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users…

Fix: 0.17.1+
Fix from $1,950 2023-08-24
Netmaker HIGH 8.8
CVE-2022-36110

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API…

Fix: 0.15.1+
Fix from $1,950 2022-09-09
Netmaker HIGH 8.8
CVE-2022-23650

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard…

Fix: 0.8.5 / 0.9.4+
Fix from $1,950 2022-02-18
Netmaker CRITICAL 9.8
CVE-2022-0664

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.

Fix: 0.8.5 / 0.9.4+
Fix from $2,300 2022-02-18