Skip to content
OpenAdvisories

Vendor

irrdnet

2 known vulnerabilities.

Products

irrd 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-28681

    IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 to before version 4.5.1, an attacker can manipulate the HTTP Host header on a pa…

    irrdnet irrd irrd PyPI
  • High 7.5
    CVE-2022-24798

    Insufficient password hash filtering in some IRRd queries and exports

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have allowed adversaries…

    irrdnet irrd irrd PyPI