Read the docs

gravitl

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

gravitl records in CISA KEV

No gravitl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Netmaker 3 records MEDIUM

Records

13 records

TI-2022-00579 CVE-2022-0664 · GHSA-6rrw-4fm9-rghv

Use of Hard-coded Cryptographic Key in gravitl/netmaker

Priority MEDIUM 46

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01748 Published 2022-02-18 Fixed in 0.8.5,0.9.4,0.10.0,0.10.1, 0.8.5 +1 CWE-321
TI-2023-15381 CVE-2023-32077 · GHSA-8x8h-hcq8-jwwx

Netmaker has Hardcoded DNS Secret Key

Priority MEDIUM 45

Netmaker makes networks with WireGuard.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03534 Published 2023-08-24 Fixed in 0.17.1, 0.18.6 CWE-321
TI-2022-07702 CVE-2022-23650 · GHSA-86f3-hf24-76q4

Use of Hard-coded Cryptographic Key in Netmaker

Priority MEDIUM 43

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01587 Published 2022-02-18 Fixed in 0.8.5, 0.9.4 CWE-321
TI-2023-15383 CVE-2023-32079 · GHSA-826j-8wp2-4x6q

Netmaker Privilige Escalation Vulnerability

Priority MEDIUM 42

Netmaker makes networks with WireGuard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00858 Published 2023-08-24 Fixed in 0.17.1, 0.18.6 CWE-915
TI-2026-79262 CVE-2026-115325 · GHSA-f2gq-2gr7-rjjc

Authorization bypass in Netmaker lets users modify other networks' clients

Priority MEDIUM 40

Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00362 Published 2026-10-22 No fix listed CWE-639
Open these records in search →