https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:43:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233731 EUVD-2026-233731 https://cve.radiocsirt.org/vuln/euvd-2026-233731 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36110 <p>Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions via the API. This problem has been patched in v0.15.1.</p> <p>Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions via the API. This problem has been patched in v0.15.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-36110 https://cve.radiocsirt.org/vuln/ghsa-ggf6-638m-vqmg <p><strong>Affected:</strong> Go: github.com/gravitl/netmaker</p> <p>### Impact Improper Authorization functions leads to non-privileged users running privileged API calls. If you have added users to your Netmaker platform who whould not have admin privileges, they could use their auth token to run admin-level functions via the API.</p> <p>In addition, differing response codes based on function calls allowed non-users to potentially brute force the determination of names of networks on the system.</p> <p>### Patches This problem has been patched in v0.15.1. To apply:</p> <p>1. docker-compose down 2. docker pull gravitl/netmaker:v0.15.1 3. docker-compose up -d</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>Email us at [info@netmaker.io](mailto:info@netmaker.io) This vulnerability was brought to our attention by @tweidinger</p> <p><strong>Affected:</strong> Go: github.com/gravitl/netmaker</p> <p>### Impact Improper Authorization functions leads to non-privileged users running privileged API calls. If you have added users to your Netmaker platform who whould not have admin privileges, they could use their auth token to run admin-level functions via the API.</p> <p>In addition, differing response codes based on function calls allowed non-users to potentially brute force the determination of names of networks on the system.</p> <p>### Patches This problem has been patched in v0.15.1. To apply:</p> <p>1. docker-compose down 2. docker pull gravitl/netmaker:v0.15.1 3. docker-compose up -d</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>Email us at [info@netmaker.io](mailto:info@netmaker.io) This vulnerability was brought to our attention by @tweidinger</p> https://cve.radiocsirt.org/vuln/ghsa-ggf6-638m-vqmg https://cve.radiocsirt.org/vuln/gsd-2022-36110 gsd-2022-36110 https://cve.radiocsirt.org/vuln/gsd-2022-36110