IXP-Manager vulnerabilities

2 known vulnerabilities in IXP-Manager from Inex. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  IXP Manager is a full-stack web application for managing Internet Exchange Points.

  CVE-2026-63339Oct 30, 2026Inex

  IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but

• 8.3 High severity

  IXP-Manager: Authorization Bypass Through User-Controlled Key

  CVE-2026-63338Oct 30, 2026Inex

  IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path in `ApiKeyController` se