VULNERABILITY INTELLIGENCE
CVE-2026-12194
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-07-04
Last modified2026-07-06
Description
PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.
Weakness classification
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a: CWE-98