{"metadata": {"vulnerability": "cve-2026-108720", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-108720", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-11T01:52:28.087Z", "date_only": false, "value": "2026-10-11T01:52:28.087Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108720", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T12:19:31.281Z", "date_only": false, "value": "2026-10-11T12:19:31.281Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108720", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T12:19:31.281Z", "date_only": false, "value": "2026-10-11T12:19:31.281Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108720", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-11T12:19:31.281Z", "date_only": false, "value": "2026-10-11T12:19:31.281Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-108720", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T12:43:59.597Z", "date_only": false, "value": "2026-10-11T12:43:59.597108Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117422334879234300", "record": "CVE-2026-108720", "field": "creation_timestamp", "uuid": "de788def-113b-4a53-adb5-e00c8e4f8298", "content": "CVE-2026-108720 phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::check_permission. Attackers can open customer objects.php, single-location.php or nat_details.php to read IP addresses, CIDRs, hostnames and MAC addresses from sections they cannot access.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108720https://hackmd.io/@haind/phpipam-tools-cross-section-address-disclosurehttps://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb948771/app/tools/customers/customer/objects/ipaddresses.php#L69-L110https://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb948771/app/tools/locations/single-location.php#L129-L195https://github.com/phpipam/phpipam/blob/e8010751d491e485acefa5787fb0e518eb948771/app/tools/nat/nat_details.php#L16-L45https://github.com/phpipam/phpipamhttps://www.vulncheck.com/advisories/phpipam-through-1.8.3-missing-authorization-in-customers-locations-and-nat-pages#phpipam#CVE_2026_108720#bot", "url": "https://infosec.exchange/users/cve/statuses/117422334879234300"}, {"timestamp": "2026-10-11T13:17:15Z", "date_only": false, "value": "2026-10-11T13:17:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RV8Q-2V6X-VPGR", "record": "GHSA-RV8Q-2V6X-VPGR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T13:17:15.307Z", "date_only": false, "value": "2026-10-11T13:17:15.307", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108720", "record": "FKIE_CVE-2026-108720", "field": "published"}, {"timestamp": "2026-10-11T13:17:15.427Z", "date_only": false, "value": "2026-10-11T13:17:15.427", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108720", "record": "FKIE_CVE-2026-108720", "field": "lastModified"}, {"timestamp": "2026-10-11T15:31:03Z", "date_only": false, "value": "2026-10-11T15:31:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RV8Q-2V6X-VPGR", "record": "GHSA-RV8Q-2V6X-VPGR", "field": "published"}, {"timestamp": "2026-10-11T15:31:03Z", "date_only": false, "value": "2026-10-11T15:31:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RV8Q-2V6X-VPGR", "record": "GHSA-RV8Q-2V6X-VPGR", "field": "modified"}]}