netmaker vulnerabilities
CVEs whose affected-version data names the netmaker package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115325High· 8.3Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup
Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network…
▾ Twilightgravitl · netmakerEPSS 0.36%via CVEORG
CVE-2026-32599Medium· 5.3Netmaker makes networks with WireGuard
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. This allows an au…
▾ Sunlitgravitl · netmakerEPSS 0.36%via NVD