Vulnerabilities

TI-2026-22896 CVE-2026-28681 · GHSA-22m3-c7vp-49fj

IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links

LOW 38

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00487 Published 2026-03-06 Fixed in 4.4.5, 4.5.1 CWE-601

TI-2022-08611 CVE-2022-24798 · GHSA-cqxx-66wh-8pjw

MEDIUM 42

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01422 Published 2022-03-31 Fixed in 4.2.3 CWE-212