Description
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| phpipam | phpIPAM | ≤ 1.8.3 | — |
High · 8.6
CVE-2026-97818
EUVD-2026-86523GHSA-j9h2-c7c3-7r7r
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.
Published Sep 25, 2026 · Updated Sep 25, 2026 · Assigned by mitre