CVE-2026-115981 | phpIPAM up to 1.8.3 upgrade/index.php REQUEST_URI cross site scripting

October 24, 2026 Yanac

A vulnerability described as problematic has been identified in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site scripting.

This vulnerability is traded as CVE-2026-115981. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More