Skip to content
OpenAdvisories

Vendor

inex

3 known vulnerabilities.

Products

IXP-Manager 2 IPX-Manager 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-63339

    IXP Manager has authenticated non-administrator privilege escalation

    IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure bu…

    inex IXP-Manager
  • High 8.3
    CVE-2026-63338

    IXP Manager has Broken Object-Level Authorization

    IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path in `ApiKeyController` s…

    inex IXP-Manager