CVE-2026-63339

IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is fixed in version 7.3.0.

• CWE-20
• CWE-269

• https://github.com/inex/IXP-Manager/releases/tag/v7.3.0
• https://github.com/inex/IXP-Manager/security/advisories/GHSA-f5xv-q6fj-hfrc

Published

Oct 30, 2026

Last Modified

Oct 30, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63330Warpgate is an open source SSH, HTTPS and MySQL bastion host…7.7
• CVE-2026-63334draw.io is a configurable diagramming and whiteboarding appl…6.8
• CVE-2026-63335The RabbitMQ Java client library allows Java and JVM-based a…6.3
• CVE-2026-63336The RabbitMQ Java client library allows Java and JVM-based a…5.1
• CVE-2026-63337The RabbitMQ Java client library allows Java and JVM-based a…7.5
• CVE-2026-63338IXP Manager is a full-stack web application for managing Int…8.3
• CVE-2026-6334Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fa…3.8
• CVE-2026-63341Aedes is an MQTT broker that can run on any stream server. P…7.5
• CVE-2026-63342Hatchet is a platform for orchestrating background tasks, AI…6.3
• CVE-2026-63343Incus is a system container and virtual machine manager. Pri…9.9
• CVE-2026-63344Refitter is a tool for generating a C# REST API client using…8.6
• CVE-2026-63345Refitter is a tool for generating a C# REST API client using…8.6