Netmaker Vulnerable to Denial of Service via Server Shutdown Endpoint

Mô tả

Tham khảo

• gravitl/netmaker security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-29771 · ADVISORY
• gravitl/netmaker · PACKAGE

Lỗ hổng khác của github.com/gravitl/netmaker

• CVE-2026-32599TRUNG BÌNH 5.3Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQ…
• CVE-2026-38651CAO 8.2Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to valid…
• CVE-2026-29196TRUNG BÌNH 4.3Netmaker makes networks with WireGuard. Prior to version 1.5.0, a user assigned the platform-user role can retrieve WireGuard private keys o…
• CVE-2026-29195TRUNG BÌNH 6.5Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prev…
• CVE-2026-29194CAO 8.1Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. …