Access Control

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. PHPIPAM <v1.5.1 - Missing AuthorizationCVE-2023-0678phpipam · CVSS 7.5 · 37% likely

   CWE-862

2. Incorrect Privilege Assignment in phpipam/phpipamCVE-2022-1225phpipam · CVSS 6.5 · 1.0% likely

   CWE-266

3. Improper Authorization in phpipam/phpipamCVE-2022-1224phpipam · CVSS 6.5 · 1.0% likely

   CWE-285

4. Incorrect Authorization in phpipam/phpipamCVE-2022-1223phpipam · CVSS 6.5 · 1.0% likely

   CWE-863

5. phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT PagesCVE-2026-108720phpipam · CVSS 4.3 · 0.3% likely

   CWE-862

6. phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.CVE-2026-97818phpipam · CVSS 8.6 · 0.3% likely

   CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.