CyberSecBulletin

Irrdnet vulnerabilities

We track 2 vulnerabilities in Irrdnet products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Irrdnet vulnerabilities

  • 8.1 High severity

    irrd: URL Redirection to Untrusted Site

    CVE-2026-28681Irrdnet

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 to before version 4.5.1, an attacker can manipulate the HTTP Host header on a pas

  • 7.5 High severity

    irrd: Improper Removal of Sensitive Information Before Storage or Transfer

    CVE-2022-24798IrrdnetEPSS 1.42%

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have allowed adversaries