gravitl has 4 CVEs on record between 2023 and 2026. 2 were published in the last 90 days. The median CVSS is 7.9 (high). Most affected products: github.com/gravitl/netmaker (2), netmaker (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.9
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Worst active — by depth score
CVE-2023-32079High· 8.8Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User49CVE-2026-115325High· 8.3Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup46CVE-2023-32078High· 7.5Netmaker IDOR Allows User to Update Other User's Password41CVE-2026-32599Medium· 5.3Netmaker makes networks with WireGuard29
gravitl vulnerabilities
CVEs affecting gravitl, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-115325High· 8.3Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup
Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network…
CVE-2026-32599Medium· 5.3Netmaker makes networks with WireGuard
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. This allows an au…
CVE-2023-32079High· 8.8Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User
CVE-2023-32078High· 7.5Netmaker IDOR Allows User to Update Other User's Password
Netmaker IDOR Allows User to Update Other User's Password