phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php...
8.6CVSS5.8AI score0.00317EPSS
SaveExploits0References2
CVE•added 2026/09/25 4:44 a.m.•44 views
CVE-2026-97818
The phpIPAM software, through version 1.8.3 , is vulnerable to an incorrect authorization flaw located in api/controllers/User.php. The issue specifically involves incorrect handling for `id==
