CVE-2026-75105

Name of the Vulnerable Software and Affected Versions phpIPAM versions prior to 1.8.2

Description An issue exists where the software fails to verify if a requested IP address belongs to the subnet for which a temporary share token was issued. In the endpoints 'app/temp share/index.php' and 'app/temp share/address.php', when the share type is set to 'subnets', the subnetId parameter is used as a database primary key to retrieve an address without validating its membership in the authorized subnet. An unauthenticated user with a valid, non-expired temporary share URL can enumerate the subnetId parameter to access all IP address records across all sections and subnets, potentially exposing hostnames, DNS names, MAC addresses, owner/contact fields, and notes that may contain credentials or configuration details.

Recommendations Update phpIPAM to version 1.8.2 or later.