HIGH7.5Go
GHSA-9v35-4xcr-w9ph· CVE-2024-41260, GO-2024-3057NetBird uses a static initialization vector (IV)
Modified: 12/16/2025
package
pkg:go/github.com/netbirdio/netbird
NetBird uses a static initialization vector (IV)
Modified: 12/16/2025
NetBird VPN does not remove the default password of an admin account
Modified: 11/5/2025
NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner
Modified: 6/25/2026
NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird
Modified: 3/3/2026
NetBird VPN does not remove the default password of an admin account in github.com/netbirdio/netbird
Modified: 3/3/2026
NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner in github.com/netbirdio/netbird
Modified: 6/25/2026