Live › vulnerability › CVE-2026-115981
Go to dashboardphpIPAM up to 1.8.3 mishandles the REQUEST_URI argument in upgrade/index.php, so a crafted URL can inject script into the page. An attacker who gets a user to open that link can run script in the victim's session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 22:46 UTC. All times on this page are UTC.
Installations of phpIPAM at version 1.8.3 or earlier that serve the upgrade page to users are exposed. Instances where the upgrade directory is removed or blocked after installation are less exposed. The sources do not name a fixed version.
No product ranges from the sources yet.
1.8.3 upper bound in the advisoryupgrade/ directory is reachable on the web serverEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-115981")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.