CVE-2026-29195 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role us…
Medium CVSS: 6.9

CVE-2026-29195

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user from assigning the super-admin role during account updates. While the code correctly blocks an admin from assigning the admin role to another user, it does not include an equivalent check for the super-admin role. This issue has been patched in version 1.5.0.
Vendor
Gravitl
Product
Netmaker
CWE
CWE-863
Yayın Tarihi
2026-03-07 17:15:51
Güncelleme
2026-03-12 13:57:57
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

Referanslar