Question 1

What is CVE-2026-12194 — CVE-2026-12194?

Accepted Answer

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.

Question 2

What is the authoritative source for CVE-2026-12194?

Accepted Answer

CVE-2026-12194 (CVE-2026-12194) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-12194CVE-2026-12194

Description

Scoring