Findings

CVE-2026-29771

Netmaker makes networks with WireGuard.

Published Mar 7, 2026 · updated Jun 17, 2026 · netmaker netmaker

Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart intervals. This issue has been patched in version 1.2.0.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 7, 2026 · NIST NVD

    Detected

    Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart intervals. This issue has been patched in version 1.2.0.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart intervals. This issue has been patched in version 1.2.0.

Affected

  • cpe netmaker/netmakerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-29771

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-29771

    Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-s

    nvd.nist.gov

References

CVE-2026-29771 · ZeroDay Findings