CVE-2026-115325 | Gravitl Netmaker up to 1.7.0 ExtClient handler {clientid} updateExtClient handler network/clientid authorization

October 22, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in Gravitl Netmaker up to 1.7.0. This affects the function updateExtClient handler of the file /api/extclients/{network}/{clientid} of the component ExtClient handler. The manipulation of the argument network/clientid leads to authorization bypass.

This vulnerability is traded as CVE-2026-115325. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More