Unauthorized Access Vulnerability in IXP Manager by INEX

CVE-2026-63338

What is CVE-2026-63338?

IXP Manager, a comprehensive web application used for managing Internet Exchange Points, has a significant vulnerability affecting its API-key management functionalities. Authenticated users were able to access and manipulate API key records belonging to other users due to insufficient checks on user identifiers. This oversight enabled unauthorized access and potential manipulation of sensitive resources. The issue has been addressed in version 7.3.0, which introduces proper validation measures to ensure that users can only view and edit their own resources.

References