PT-2026-23107 · Netmaker · Netmaker

M4Dn355 · Publicado 2025-08-08 · Atualizado 2026-03-25 · CVE-2026-29771

Positive Technologies (AI Summary) · Pt

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Nome do Software Vulnerável e Versões Afetadas Versões do Netmaker anteriores à 1.2.0

Descrição O endpoint /api/server/shutdown permite que qualquer usuário encerre o processo do servidor Netmaker via syscall.SIGINT. Isso pode levar a uma negação de serviço cíclica, com o servidor reiniciando aproximadamente a cada 3 segundos.

Recomendações Atualize para a versão 1.2.0 ou posterior.

Exploit

Correção

DoS

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

BDU:2026-03337

CVE-2026-29771

GHSA-RHR9-HGCM-X289

GO-2026-4608

SUSE-SU-2026:1042-1

Produtos afetados

Netmaker

Referências · 140

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29771.json · Exploit
• https://github.com/gravitl/netmaker · Nota
• https://github.com/gravitl/netmaker/releases/tag/v1.2.0 · Nota
• https://github.com/gravitl/netmaker/security/advisories/GHSA-rhr9-hgcm-x289 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-28789 · Nota
• https://suse.com/security/cve/CVE-2026-29781 · Nota
• https://suse.com/security/cve/CVE-2026-27808 · Nota
• https://suse.com/security/cve/CVE-2026-31886 · Nota
• https://suse.com/security/cve/CVE-2026-23999 · Nota
• https://suse.com/security/cve/CVE-2026-32246 · Nota
• https://suse.com/security/cve/CVE-2026-25963 · Nota
• https://suse.com/security/cve/CVE-2026-30857 · Nota
• https://suse.com/security/cve/CVE-2026-31961 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20261042-1 · Nota
• https://suse.com/security/cve/CVE-2026-28407 · Nota