CVE-2026-67602

CRITICAL 9.1

phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an entry written during an app_id lookup to satisfy a subsequent app_code lookup, allowing attackers to use the numeric database row identifier as an API token to read, write, and delete all IP address management records.

CWE	CWE-706
Vendor	phpipam
Product	phpipam
Published	Aug 24, 2026

Stay Ahead of the Next One

Get instant alerts for phpipam phpipam

Be the first to know when new critical vulnerabilities affecting phpipam phpipam are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

phpipam / phpipam

0 < 1.8.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/phpipam/phpipam/releases/tag/v1.8.2 github.com: https://github.com/phpipam/phpipam/commit/d29728fecca327f1ea825798908d0cfa4c62408e vulncheck.com: https://www.vulncheck.com/advisories/phpipam-authentication-bypass-via-rest-api-object-cache

Credits

BENDIB MOHAMED ANIS VulnCheck