Vulnerabilities in gravitl
13 resultsCVE-2023-32077HIGHNetmaker has Hardcoded DNS Secret KeyEPSS 3.5%CVE-2022-0664HIGHUse of Hard-coded Cryptographic Key in gravitl/netmakerEPSS 1.7%CVE-2022-23650HIGHUse of Hard-coded Cryptographic Key in NetmakerEPSS 1.6%CVE-2022-36110HIGHNetmaker vulnerable to Insufficient Granularity of Access ControlEPSS 0.9%CVE-2023-32079HIGHNetmaker Privilige Escalation VulnerabilityEPSS 0.9%CVE-2023-32078HIGHNetmaker IDOR Vulnerability Allows User to Update Other User's PasswordEPSS 0.7%CVE-2026-29194HIGHNetmaker: Insufficient Authorization in Host Token VerificationEPSS 0.5%CVE-2026-29771HIGHNetmaker: Denial of Service via Server Shutdown EndpointEPSS 0.4%CVE-2026-115325HIGHNetmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped LookupEPSS 0.4%CVE-2026-32599MEDIUMNetmaker has a boolean‑based SQL InjectionEPSS 0.4%CVE-2026-29196HIGHNetmaker: Service User with Network Access Can Access config files with WireGuard Private KeysEPSS 0.3%CVE-2026-81034HIGHNetmaker through 1.6.0 Improper Certificate Validation in SMTP ClientEPSS 0.3%CVE-2026-29195MEDIUMNetmaker: Privilege Escalation from Admin to Super-Admin via User UpdateEPSS 0.3%