Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 06:13:20 +0000 CVE-2026-29196 — Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys https://db.gcve.eu/vuln/cve-2026-29196 <p><strong>Affected:</strong> gravitl netmaker</p> <p>Netmaker makes networks with WireGuard. Prior to version 1.5.0, a user assigned the platform-user role can retrieve WireGuard private keys of all wireguard configs in a network by calling GET /api/extclients/{network} or GET /api/nodes/{network}. While the Netmaker UI restricts visibility, the API endpoints return full records, including private keys, without filtering based on the requesting user&#39;s ownership. This issue has been patched in version 1.5.0.</p> <p><strong>Affected:</strong> gravitl netmaker</p> <p>Netmaker makes networks with WireGuard. Prior to version 1.5.0, a user assigned the platform-user role can retrieve WireGuard private keys of all wireguard configs in a network by calling GET /api/extclients/{network} or GET /api/nodes/{network}. While the Netmaker UI restricts visibility, the API endpoints return full records, including private keys, without filtering based on the requesting user&#39;s ownership. This issue has been patched in version 1.5.0.</p> https://db.gcve.eu/vuln/cve-2026-29196