phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

高危 CVSS 8.6

CVECVE-2026-97818

首次发现2026-09-25 07:16 UTC

披露时间2026-09-25 05:17 UTC

最后更新2026-09-25 07:16 UTC

通道状态auto

摘要

phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。