Low severityNVD Advisory· Published Jul 4, 2026· Updated Jul 6, 2026

CVE-2026-12194

Description

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.

Affected products

Phpipam/Phpipamllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/phpipam/phpipam/pull/4625nvd
projectblack.io/blog/local-ai-for-cyber-security/nvd

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000