{"items":[{"id":"CVE-2026-108720","published":"2026-10-11T12:19:31.281Z","updated":"2026-10-13T13:17:08.960Z","title":"phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages","severity":"MEDIUM","score":5.3,"vendor":"phpipam","product":"phpipam","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2026-97818","published":"2026-09-25T04:44:18.843Z","updated":"2026-09-25T13:53:51.123Z","title":"phpIPAM through 1.8.3 has incorrect authorization for id==\"admins\" and id==\"all\" in api/controllers/User.php.","severity":"HIGH","score":8.6,"vendor":"phpipam","product":"phpIPAM","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2026-67602","published":"2026-08-24T13:57:42.191Z","updated":"2026-10-01T15:20:18.449Z","title":"phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache","severity":"CRITICAL","score":9.3,"vendor":"phpipam","product":"phpipam","kev":false,"epss":0.0064,"kevAdded":null},{"id":"CVE-2026-75105","published":"2026-08-17T20:36:01.403Z","updated":"2026-09-24T14:19:18.272Z","title":"phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter","severity":"HIGH","score":8.7,"vendor":"phpipam","product":"phpipam","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2026-12194","published":"2026-07-04T06:54:21.815Z","updated":"2026-07-06T18:32:12.392Z","title":"PHPIPAM Authenticated LFI","severity":"LOW","score":2.3,"vendor":"phpipam","product":"phpipam","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2024-55093","published":"2025-03-31T00:00:00.000Z","updated":"2025-03-31T13:41:23.227Z","title":"phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.","severity":"MEDIUM","score":5.4,"vendor":"phpIPAM","product":"phpIPAM","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2024-10721","published":"2025-03-20T10:11:07.493Z","updated":"2025-03-20T13:35:03.620Z","title":"Store XSS in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-10727","published":"2025-03-20T10:10:58.253Z","updated":"2025-03-20T15:53:17.600Z","title":"Cross-Site Scripting (XSS) in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2024-10720","published":"2025-03-20T10:10:32.703Z","updated":"2025-03-20T18:20:08.111Z","title":"Stored Cross-site Scripting (XSS) in phpipam/phpipam","severity":"HIGH","score":8.2,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2024-10722","published":"2025-03-20T10:10:29.411Z","updated":"2025-03-20T18:20:56.040Z","title":"Stored Cross-site Scripting (XSS) in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-10719","published":"2025-03-20T10:10:07.646Z","updated":"2025-03-20T18:31:08.165Z","title":"Stored Cross-site Scripting (XSS) in phpipam/phpipam","severity":"LOW","score":2.4,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2024-10718","published":"2025-03-20T10:10:07.285Z","updated":"2025-03-20T18:31:14.232Z","title":"Cookie without Secure attribute in phpipam/phpipam","severity":"MEDIUM","score":5.3,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2024-10724","published":"2025-03-20T10:09:30.561Z","updated":"2025-03-20T18:38:13.642Z","title":"Stored XSS in IPV6 Section in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-10723","published":"2025-03-20T10:09:23.803Z","updated":"2025-03-20T18:55:33.336Z","title":"Stored XSS in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-10725","published":"2025-03-20T10:09:15.972Z","updated":"2025-03-20T18:57:09.070Z","title":"Stored Cross-site Scripting (XSS) in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2022-1226","published":"2024-11-15T10:57:20.597Z","updated":"2024-11-15T20:59:32.661Z","title":"Cross-site Scripting (XSS) in phpipam/phpipam","severity":"LOW","score":3.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2024-0787","published":"2024-11-15T10:57:05.410Z","updated":"2024-11-15T19:09:48.262Z","title":"Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam","severity":"MEDIUM","score":5.3,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2023-1212","published":"2023-03-06T00:00:00.000Z","updated":"2025-03-06T18:32:30.084Z","title":"Cross-site Scripting (XSS) - Stored in phpipam/phpipam","severity":"MEDIUM","score":5.9,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2023-1211","published":"2023-03-06T00:00:00.000Z","updated":"2026-02-16T14:52:08.146Z","title":"SQL Injection in phpipam/phpipam","severity":"HIGH","score":7.2,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.0305,"kevAdded":null},{"id":"CVE-2023-0678","published":"2023-02-04T00:00:00.000Z","updated":"2025-03-26T14:44:18.479Z","title":"Missing Authorization in phpipam/phpipam","severity":"HIGH","score":7.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.37304,"kevAdded":null},{"id":"CVE-2023-0677","published":"2023-02-04T00:00:00.000Z","updated":"2025-03-26T14:45:44.235Z","title":"Cross-site Scripting (XSS) - Reflected in phpipam/phpipam","severity":"MEDIUM","score":4.4,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2023-0676","published":"2023-02-04T00:00:00.000Z","updated":"2026-02-13T16:33:48.571Z","title":"Cross-site Scripting (XSS) - Reflected in phpipam/phpipam","severity":"LOW","score":2.4,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2022-1225","published":"2022-04-04T10:50:11.000Z","updated":"2024-08-02T23:55:24.394Z","title":"Incorrect Privilege Assignment in phpipam/phpipam","severity":"MEDIUM","score":6.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.01031,"kevAdded":null},{"id":"CVE-2022-1223","published":"2022-04-04T10:45:20.000Z","updated":"2024-08-02T23:55:24.453Z","title":"Incorrect Authorization in phpipam/phpipam","severity":"MEDIUM","score":6.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.01025,"kevAdded":null},{"id":"CVE-2022-1224","published":"2022-04-04T10:45:15.000Z","updated":"2024-08-02T23:55:24.593Z","title":"Improper Authorization in phpipam/phpipam","severity":"MEDIUM","score":6.5,"vendor":"phpipam","product":"phpipam/phpipam","kev":false,"epss":0.01031,"kevAdded":null}]}