{"vulnerability": "CVE-2026-67602", "sightings": [{"uuid": "66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mttj7n552i25", "content": "\u26a0\ufe0f PATCH NOW\n\nphpIPAM, the open-source tool teams use to track their networks, has a critical bug (CVE-2026-67602, CVSS 9.3).\n\nWith no login, a stranger can read, change, and delete every IP record through its API.\n\nEverything before 1.8.2 is affected. Fix: update to 1.8.2 now.", "creation_timestamp": "2026-08-24T14:28:03.641901Z"}, {"uuid": "2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnafi2pu2p", "content": "CVE-2026-67602 - phpipam\nThe phpIPAM tool versions earlier than 1.8.2 let anyone use the REST API without proving they are authorized. This means an outsider could read, change, or delete your IP address records.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpipam #CVE #infosec", "creation_timestamp": "2026-08-24T15:40:03.966244Z"}, {"uuid": "12783c00-92bc-442b-8054-b88934050d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttosak7m72b", "content": "\ud83d\udea8 CVE-2026-67602 \u2014 CVSS 9.3 CRITICAL\n\nphpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67602\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:07:56.396039Z"}, {"uuid": "2357d4b1-16e9-408d-b3e9-5f0dda958970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv3mjo25j25", "content": "CVE-2026-67602\nThe ip address management tool phpIPAM versions older than 1.8.2 let anyone call its web API as if they were an authorized user. By tricking a simple data cache, an attacker can use a database record number as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:30:04.127859Z"}]}