PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-97818 phpipam CVE debrief

CVE-2026-97818 is a HIGH severity vulnerability in phpIPAM through version 1.8.3, involving incorrect authorization in the User.php controller. This issue allows for unauthorized access, with a CVSS score of 8.6. The CVE was published on 2026-09-25T05:17:08.120Z and has not been modified since then. The vulnerability affects phpIPAM installations, and defenders should verify and patch their systems to prevent potential security incidents. The CVE record and NVD entry provide details on the vulnerability, including its CVSS score and affected versions.

Vendor
phpipam
Product
Unknown
CVSS
HIGH 8.6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-25
Original CVE updated
2026-09-25
Advisory published
2026-09-25
Advisory updated
2026-09-25

Who should care

Defenders responsible for phpIPAM installations, security teams, and IT administrators should be aware of this vulnerability and take steps to verify and patch their systems.

Why it matters

CVE-2026-97818 is a HIGH severity vulnerability in phpIPAM that requires immediate attention from defenders. The vulnerability allows for unauthorized access, and its exploitation could lead to security breaches. Defenders should prioritize verifying and patching phpIPAM installations to prevent potential security incidents.

  • Potential unauthorized access to phpIPAM systems
  • Need for verification and patching of affected installations
  • Possible impact on system security and data integrity

Technical summary

The vulnerability is caused by incorrect authorization checks in the User.php controller of phpIPAM version 1.8.3. Specifically, the checks for id==admins and id==all are not properly implemented, allowing for unauthorized access. This issue can be addressed by verifying and applying patches for phpIPAM version 1.8.3 or earlier, reviewing and updating authorization settings in the User.php controller, and monitoring for potential unauthorized access attempts.

Defensive priority

Defenders should prioritize verifying and patching phpIPAM installations to prevent unauthorized access.

Recommended defensive actions

  • Verify and apply patches for phpIPAM version 1.8.3 or earlier
  • Review and update authorization settings in User.php controller
  • Monitor for potential unauthorized access attempts

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score and affected versions. However, further verification is needed to determine the full scope of affected systems and potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-97818 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-97818

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-97818 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-97818

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.