Post
Suriq - Always on Watch
suriq.io
did:plc:6vjp7fbgz5ductueireifliv
phpIPAM, the open-source tool teams use to track their IP addresses, has a flaw (CVE-2026-75105): one temporary share link lets a stranger read every IP record across all your subnets.
Affects versions through 1.8.1.
Fix: update to 1.8.2, then revoke old share links.
https://suriq.io/blog/phpipam-temp-share-broken-authorization-cve-2026-75105
2026-08-17T20:56:27.263Z