phpIPAM vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20235
3. 20242
4. 202510
5. 20265

Newest CVEs

• CVE-2026-108720

  phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

  phpipam · phpipam

  Medium5.3
• CVE-2026-97818

  phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

  phpipam · phpIPAM

  High8.6
• CVE-2026-67602

  phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

  phpipam · phpipam

  Critical9.3
• CVE-2026-75105

  phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

  phpipam · phpipam

  High8.7
• CVE-2026-12194

  PHPIPAM Authenticated LFI

  phpipam · phpipam

  Low2.3
• CVE-2024-55093

  phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.

  phpIPAM · phpIPAM

  Medium5.4
• CVE-2024-10721

  Store XSS in phpipam/phpipam

  phpipam · phpipam/phpipam

  Low3.5
• CVE-2024-10727

  Cross-Site Scripting (XSS) in phpipam/phpipam

  phpipam · phpipam/phpipam

  Low3.5
• CVE-2024-10720

  Stored Cross-site Scripting (XSS) in phpipam/phpipam

  phpipam · phpipam/phpipam

  High8.2
• CVE-2024-10722

  Stored Cross-site Scripting (XSS) in phpipam/phpipam

  phpipam · phpipam/phpipam

  Low3.5