CVE-2026-32599 in Netmakerinformazioni

Riassunto

di MITRE • 15/09/2026

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection. Version 1.5.0 fixes the issue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

GitHub M

Prenotare

12/03/2026

Divulgazione

15/09/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-32599
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32599
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-32599/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!