CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
IXP Manager Privilege Escalation Vulnerability Advisory (CVE-2026-63339)
[Affected Scope] All IXP Manager versions prior to 7.3.0
[Impact] Authenticated non-admin users can elevate privileges to Administrator status, gaining full control over the IXP platform
[Mitigation] Immediate upgrade to version 7.3.0 or later is required
IXP Manager IDOR Vulnerability in API Key Management (CVE-2026-63338)
[Affected Scope] All IXP Manager installations prior to version 7.3.0.
[Impact] Authenticated attackers can view or modify API keys belonging to other users, potentially leading to full administrative takeover of the IXP infrastructure.
[Mitigation] Immediately upgrade IXP Manager to version 7.3.0 or later.
Arraytics Booktics WordPress Plugin Missing Authorization Vulnerability (CVE-2026-104674)
[Affected Scope] Booktics WordPress plugin versions up to 1.0.31.
[Impact] Authenticated users with low privileges can access unauthorized data or functions due to broken access control.
[Mitigation] Update to the latest version (1.0.32 or higher) immediately.