CVE-2026-115325

Netmaker versions through 1.7.0 are vulnerable to an authorization bypass within the updateExtClient handler. This flaw allows users with network-scoped permissions on one network to modify external clients on unrelated networks by sending PUT requests to /api/extclients/{network}/{clientid}. Suc...

EUVD-2026-108127

Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to /api/extclients/network/clientid t...