CVE-2026-12194 — PHPIPAM Authenticated LFI
PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's fi…
Published: 2026-07-04 · CVSS: 2.3 · CVSS 4.0
PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7