CyberSecBulletin

Netmaker vulnerabilities

We track 1 vulnerability in Netmaker products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Netmaker vulnerabilities

  • 8.2 High severity

    Netmaker: Improper Verification of Cryptographic Signature

    CVE-2026-38651Netmaker

    Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to validate the JWT signature when verifying host tokens. An attacker can forge a JWT signed with any arbitrary key and use it t