Known Vulnerabilities for products from Phpmyfaq
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Phpmyfaq".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85593 json | Not Provided | 2026-09-04 | 2026-09-04 | |
| CVE-2026-85592 json | Not Provided | 2026-09-04 | 2026-09-04 | |
| CVE-2026-85591 json | Not Provided | 2026-09-04 | 2026-09-10 | |
| CVE-2026-85590 json | Not Provided | 2026-09-04 | 2026-09-04 | |
| CVE-2026-85589 json | Not Provided | 2026-09-04 | 2026-09-08 | |
| CVE-2026-85588 json | Not Provided | 2026-09-04 | 2026-09-04 | |
| CVE-2026-85587 json | Not Provided | 2026-09-04 | 2026-09-04 | |
| CVE-2026-85586 json | Not Provided | 2026-09-04 | 2026-09-10 | |
| CVE-2026-76215 json | phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and att... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76214 json | phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn co... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76213 json | phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76212 json | phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAP... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76211 json | phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticse... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76210 json | phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with per... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76209 json | phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76208 json | phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authent... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76207 json | phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2F... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76206 json | phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers ... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-76205 json | phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating... | Not Provided | 2026-08-19 | 2026-09-01 |
| CVE-2026-75920 json | phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensit... | Not Provided | 2026-08-19 | 2026-09-01 |
Known software with vulnerabilities from Phpmyfaq
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Phpmyfaq | Phpmyfaq | 0.1 |