IXP-Manager vulnerabilities
CVEs whose affected-version data names the IXP-Manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-63339High· 8.8IXP Manager has authenticated non-administrator privilege escalation
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functio…
▾ Twilightinex · IXP-ManagerEPSS 0.27%via CVEORG
CVE-2026-63338High· 8.3IXP Manager has Broken Object-Level Authorization
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path i…
▾ Twilightinex · IXP-ManagerEPSS 0.26%via CVEORG