Live › vulnerability › CVE-2026-63339
IXP Manager, a web application for running Internet Exchange Points, lets a logged-in non-administrative user raise their own account to administrator. An attacker with any ordinary account gains administrative control over the application.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 23:26 UTC. All times on this page are UTC.
Teams running IXP Manager versions before 7.3.0 where users hold authenticated accounts. The source says restricting administrative functions reduces exposure but is not a complete fix, so upgrading is the stated remedy. Installations with no user accounts beyond trusted administrators are less exposed.
No product ranges from the sources yet.
7.3.0 are affected.7.3.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is fixed in version 7.3.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-63339")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.