CVE ID :CVE-2026-63339 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63339 - IXP Manager has authenticated non-administrator privilege escalation

VERWANDTEARTIKEL

CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names

CVE-2026-63377 - TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

CVE-2026-63378 - TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

CVE-2026-63393 - OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

CVE-2026-63396 - Coop has a data leak via unauthenticated GraphQL Query.allOrgs

CVE-2026-63338 - IXP Manager has Broken Object-Level Authorization