CVE-2026-75105

phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/tempshare/index.php and app/tempshare/address.php, when the share type is 'subnets', the subnetId parameter is used directly as a database primary key to fetch an...

CVE-2026-75105 phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/tempshare/index.php and app/tempshare/address.php, when the share type is 'subnets', the subnetId parameter is used directly as a database primary key to fetch an...

CVE-2026-75105

phpIPAM ≤1.8.1 lacks subnet-scope checks in app/temp_share/index.php and address.php; an unauthenticated holder of any temporary share URL can enumerate the subnetId parameter to read IP records—including hostnames, DNS, MAC addresses, and notes—across all sections and subnets. Patch released in ...