What is GHSA-cr5v-q482-32fc?

GHSA-cr5v-q482-32fc is a security advisory published by GitHub Security Advisories with Low severity. PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with...

Which CVE IDs does GHSA-cr5v-q482-32fc cover?

GHSA-cr5v-q482-32fc covers the following CVE IDs: CVE-2026-12194. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-cr5v-q482-32fcLow

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with...

Vendor

GitHub Security Advisories

Published

July 4, 2026

Last Modified

July 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-12194 →

📋 Description

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-12194
https://github.com/phpipam/phpipam/pull/4625
https://projectblack.io/blog/local-ai-for-cyber-security/#the-benchmark-vulnerabilityphpipam-authenticated-lfi
https://github.com/advisories/GHSA-cr5v-q482-32fc