ietf-tools vulnerabilities

Products

• datatracker 1

Latest ietf-tools CVEs

Newest publication first

1. CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views

   Published 2026-11-09

   Medium·CVSS 5.3 EPSS 0.24%

   IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse view_feedback_nominee, view_feedback_topic, view_feedback_unrelated and edi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.