gravitl vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20233
3. 20267

Newest CVEs

• CVE-2026-115325

  Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup

  gravitl · netmaker

  High8.7
• CVE-2026-32599

  Netmaker has a boolean‑based SQL Injection

  gravitl · netmaker

  Medium5.3
• CVE-2026-81034

  Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client

  gravitl · netmaker

  High8.3
• CVE-2026-29196

  Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys

  gravitl · netmaker

  High8.7
• CVE-2026-29195

  Netmaker: Privilege Escalation from Admin to Super-Admin via User Update

  gravitl · netmaker

  Medium6.9
• CVE-2026-29194

  Netmaker: Insufficient Authorization in Host Token Verification

  gravitl · netmaker

  High8.6
• CVE-2026-29771

  Netmaker: Denial of Service via Server Shutdown Endpoint

  gravitl · netmaker

  High8.7
• CVE-2023-32079

  Netmaker Privilige Escalation Vulnerability

  gravitl · netmaker

  High8.8
• CVE-2023-32078

  Netmaker IDOR Vulnerability Allows User to Update Other User's Password

  gravitl · netmaker

  High7.5
• CVE-2023-32077

  Netmaker has Hardcoded DNS Secret Key

  gravitl · netmaker

  High7.5