CVE-2026-32599 in Netmakerinformation

Résumé

par MITRE • 15/09/2026

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection. Version 1.5.0 fixes the issue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

GitHub M

Réserver

12/03/2026

Divulgation

15/09/2026

Modérer

accepté

Entrée

VDB-404670

CPE

prêt

CWE

CWE-89 (confirmé)

CVSS

6.3 (VulDB)

EPSS

0.00000

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-32599
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-32599
CVE Details	https://www.cvedetails.com/cve/CVE-2026-32599/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!