CVE-2026-97818: phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

CVE-2026-97818 · Severity: high · CVSS 8.6 · Published 2026-09-25

Executive brief

phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.