CVE-2026-32599 in Netmakerinformação

Sumário

de MITRE • 15/09/2026

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection. Version 1.5.0 fixes the issue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

GitHub M

Reservar

12/03/2026

Divulgação

15/09/2026

Moderação

aceite

Entrada

VDB-404670

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-32599
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32599
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-32599/

◂ VoltarVisão GeralPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!