CVE-2026-115981: phpIPAM index.php cross site scripting
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUESTURI leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
Which deployments should be reviewed?
phpIPAM deployments running versions up to and including 1.8.3 should be reviewed, particularly where the upgrade/index.php endpoint is reachable.
What does an attacker need to exploit this issue?
The attack can be launched remotely by manipulating the REQUEST_URI argument. The supplied severity vector indicates that the attacker also requires high privileges and user interaction.
Is exploitation information publicly available?
Yes. The vulnerability information states that an exploit has been publicly disclosed and may be used.