CVE-2026-76206 in phpMyFAQinformación

Resumen

por MITRE • 2026-08-19

phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access the public PDF export route with sequential FAQ identifiers to obtain titles, solution IDs, author names, and last-update timestamps of inactive or unpublished FAQs.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-08-19

Divulgación

2026-08-19

Moderación

aceptado

Artículo

VDB-393080

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Hostingprovider, Lawfirm, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-76206
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-76206
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-76206/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!