Privilege Escalation in IXP Manager by INEX

CVE-2026-63339

What is CVE-2026-63339?

IXP Manager, a comprehensive web application for managing Internet Exchange Points, is susceptible to a privilege escalation flaw. Prior to version 7.3.0, an authenticated, non-administrative user could exploit security weaknesses to gain administrator privileges. While implementing restrictions on administrative functions mitigates exposure, users still remain vulnerable until they update to the patched version. For a complete fix, users are strongly advised to upgrade to version 7.3.0 or later.

References