CVE-2026-38651

Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to validate the JWT signature when verifying host tokens. An attacker can forge a JWT signed with any arbitrary key and use it to impersonate any host in the network, gaining access to sensitive information

• CWE-347

• https://github.com/gravitl/netmaker/commit/5309aa70d464ef565911369714d661a61481a79bPatch
• https://www.zyenra.com/advisories/netmaker-jwt-verification-bypassExploit, Third Party Advisory
• https://www.zyenra.com/blog/netmaker-jwt-verification-bypassExploit, Third Party Advisory
• https://www.zyenra.com/advisories/netmaker-jwt-verification-bypass/Exploit, Third Party Advisory
• https://www.zyenra.com/blog/netmaker-jwt-verification-bypassExploit, Third Party Advisory

Published

Apr 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3862Cross-site Scripting (XSS) allows an attacker to submit spec…4.8
• CVE-2026-38637An issue in the pthread_rwlockattr_setpshared() function of …7.5
• CVE-2026-38639An issue in the parse_month function (/time/strptime.rs) of …7.5
• CVE-2026-3864A vulnerability was discovered in the Kubernetes CSI Driver …6.5
• CVE-2026-38640A reachable unwrap in the __assert_fail function (/assert/mo…7.5
• CVE-2026-38641An issue in the DSO::mmap_and_copy function of relibc commit…7.5
• CVE-2026-38669wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when …6.1
• CVE-2026-3867An improper ownership management vulnerability has been iden…6
• CVE-2026-3868An improper handling of the length parameter inconsistency v…8.7
• CVE-2026-3870A buffer overflow vulnerability in the UPnP AddPortMapping()…6.5
• CVE-2026-38702A command injection vulnerability exists in the Admin Access…9.8
• CVE-2026-38703A command injection vulnerability exists in the ZeroTier VPN…9.8