CVE-2026-76206
phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
- State
- Published
- Severity
- 6.9 Medium
- Published
- Aug 19, 2026
- Updated
- Aug 20, 2026
- Reserved
- Aug 19, 2026
Description
phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access the public PDF export route with sequential FAQ identifiers to obtain titles, solution IDs, author names, and last-update timestamps of inactive or unpublished FAQs.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | VulnCheck |
Weaknesses
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
phpMyFAQthorsten |
|
References
- GitHub Security Advisory (GHSA-f8pr-32pp-mp7h)vendor-advisory
- VulnCheck Advisory: phpMyFAQ before 4.1.7 Information Disclosure via PDF Exportthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.