CVE-2024-41260

—

CVSS 3.1

7.5 high

EPSS

<1%p39

Published

Aug 1, 2024 (Aug 1, 2024)

Modified

Jun 17, 2026

Description

A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.

Weakness: CWE-321
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.