Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-63339

IXP Manager has authenticated non-administrator privilege escalation

Description

IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is fixed in version 7.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

inex IXP-Manager

  • < 7.3.0affected

References