phpIPAM phpIPAM vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20265

Newest CVEs

• CVE-2026-108720

  phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

  phpipam · phpipam

  Medium5.3
• CVE-2026-97818

  phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

  phpipam · phpIPAM

  High8.6
• CVE-2026-67602

  phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

  phpipam · phpipam

  Critical9.3
• CVE-2026-75105

  phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

  phpipam · phpipam

  High8.7
• CVE-2026-12194

  PHPIPAM Authenticated LFI

  phpipam · phpipam

  Low2.3
• CVE-2024-55093

  phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.

  phpIPAM · phpIPAM

  Medium5.4