{"schema_version":1,"title":"Thorsten phpMyFAQ vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 56 vulnerabilities in Thorsten phpMyFAQ: 4 in the last 7 days and 22 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-56738, was published on 24 September 2026.","url":"https://junglewise.ai/threats/technologies/phpmyfaq","json_url":"https://junglewise.ai/threats/technologies/phpmyfaq.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/phpmyfaq","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":21,"all_time":56,"critical":4,"exploited":0,"last_7_days":4,"last_30_days":12,"last_90_days":22,"last_365_days":56},"latest":[{"cve":"CVE-2026-56738","cvss":6.5,"epss":0.0026,"slug":"cve-2026-56738-phpmyfaq-sql-injection-in-stopwords-add","title":"phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement usin","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:04.89+00:00","url":"https://junglewise.ai/threats/cve-2026-56738-phpmyfaq-sql-injection-in-stopwords-add"},{"cve":"CVE-2026-47132","cvss":5.4,"epss":0.0025,"slug":"cve-2026-47132-phpmyfaq-sql-like-wildcard-injection-in-chat-user-search","title":"phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in","severity":"medium","exploited":false,"published_at":"2026-09-24T17:17:04.723+00:00","url":"https://junglewise.ai/threats/cve-2026-47132-phpmyfaq-sql-like-wildcard-injection-in-chat-user-search"},{"cve":"CVE-2026-56737","cvss":8.1,"epss":0.004,"slug":"cve-2026-56737-phpmyfaq-two-factor-authentication-password-bypass","title":"phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authe","severity":"high","exploited":false,"published_at":"2026-09-24T16:17:07.637+00:00","url":"https://junglewise.ai/threats/cve-2026-56737-phpmyfaq-two-factor-authentication-password-bypass"},{"cve":"CVE-2026-56736","cvss":8.2,"epss":0.0024,"slug":"cve-2026-56736-phpmyfaq-stored-xss-in-admin-faq-editor-via-html-entity-bypass","title":"phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows an","severity":"high","exploited":false,"published_at":"2026-09-24T15:17:24.1+00:00","url":"https://junglewise.ai/threats/cve-2026-56736-phpmyfaq-stored-xss-in-admin-faq-editor-via-html-entity-bypass"},{"cve":"CVE-2026-85593","cvss":5.4,"epss":0.0024,"slug":"cve-2026-85593-phpmyfaq-stored-cross-site-scripting-in-link-conversion","title":"phpMyFAQ stored cross-site scripting in link conversion","severity":"medium","exploited":false,"published_at":"2026-09-04T12:17:22.697+00:00","url":"https://junglewise.ai/threats/cve-2026-85593-phpmyfaq-stored-cross-site-scripting-in-link-conversion"},{"cve":"CVE-2026-85592","cvss":3.7,"epss":0.0031,"slug":"cve-2026-85592-phpmyfaq-authorization-bypass-in-question-creation-endpoint","title":"phpMyFAQ authorization bypass in question creation endpoint","severity":"low","exploited":false,"published_at":"2026-09-04T12:17:22.557+00:00","url":"https://junglewise.ai/threats/cve-2026-85592-phpmyfaq-authorization-bypass-in-question-creation-endpoint"},{"cve":"CVE-2026-85591","cvss":7.1,"epss":0.0052,"slug":"cve-2026-85591-phpmyfaq-unverified-password-change-in-user-control-panel-api","title":"phpMyFAQ unverified password change in user control panel API","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:22.433+00:00","url":"https://junglewise.ai/threats/cve-2026-85591-phpmyfaq-unverified-password-change-in-user-control-panel-api"},{"cve":"CVE-2026-85590","cvss":7.1,"epss":0.0052,"slug":"cve-2026-85590-phpmyfaq-two-factor-authentication-bypass-via-insufficient-re","title":"phpMyFAQ two-factor authentication bypass via insufficient re-authentication","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:21.327+00:00","url":"https://junglewise.ai/threats/cve-2026-85590-phpmyfaq-two-factor-authentication-bypass-via-insufficient-re"},{"cve":"CVE-2026-85589","cvss":5.3,"epss":0.0049,"slug":"cve-2026-85589-phpmyfaq-missing-authorization-in-admin-api-endpoints","title":"phpMyFAQ missing authorization in admin API endpoints","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:21.16+00:00","url":"https://junglewise.ai/threats/cve-2026-85589-phpmyfaq-missing-authorization-in-admin-api-endpoints"},{"cve":"CVE-2026-85588","cvss":5.3,"epss":0.0053,"slug":"cve-2026-85588-phpmyfaq-sensitive-information-disclosure-in-user-data-export","title":"phpMyFAQ sensitive information disclosure in user data export","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:21.013+00:00","url":"https://junglewise.ai/threats/cve-2026-85588-phpmyfaq-sensitive-information-disclosure-in-user-data-export"},{"cve":"CVE-2026-85587","cvss":5.3,"epss":0.0036,"slug":"cve-2026-85587-phpmyfaq-incorrect-permission-checks-on-admin-content-pages","title":"phpMyFAQ incorrect permission checks on admin content pages","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:20.867+00:00","url":"https://junglewise.ai/threats/cve-2026-85587-phpmyfaq-incorrect-permission-checks-on-admin-content-pages"},{"cve":"CVE-2026-85586","cvss":6.9,"epss":0.0049,"slug":"cve-2026-85586-phpmyfaq-captcha-bypass-in-question-submission-via-store","title":"phpMyFAQ CAPTCHA bypass in question submission via store parameter","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:20.737+00:00","url":"https://junglewise.ai/threats/cve-2026-85586-phpmyfaq-captcha-bypass-in-question-submission-via-store"},{"cvss":8.8,"slug":"phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe","title":"phpMyFAQ privilege escalation in GroupController::updatePermissions","severity":"high","exploited":false,"published_at":"2026-08-25T17:32:07+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe"},{"cvss":5.3,"slug":"phpmyfaq-public-api-information-disclosure-in-faq-endpoints-8f0c6c40","title":"phpMyFAQ public API information disclosure in FAQ endpoints","severity":"medium","exploited":false,"published_at":"2026-08-25T17:30:23+00:00","url":"https://junglewise.ai/threats/phpmyfaq-public-api-information-disclosure-in-faq-endpoints-8f0c6c40"},{"cvss":4.9,"slug":"phpmyfaq-path-traversal-in-pdf-export-5f62d0df","title":"phpMyFAQ path traversal in PDF export","severity":"medium","exploited":false,"published_at":"2026-08-25T17:28:56+00:00","url":"https://junglewise.ai/threats/phpmyfaq-path-traversal-in-pdf-export-5f62d0df"},{"cve":"CVE-2026-66399","cvss":6.5,"slug":"cve-2026-66399-thorsten-phpmyfaq-privilege-escalation-in-groupcontroller","title":"thorsten phpMyFAQ privilege escalation in GroupController","severity":"medium","exploited":false,"published_at":"2026-07-27T16:18:12.633+00:00","url":"https://junglewise.ai/threats/cve-2026-66399-thorsten-phpmyfaq-privilege-escalation-in-groupcontroller"},{"cve":"CVE-2026-66398","cvss":9.4,"slug":"cve-2026-66398-thorsten-phpmyfaq-remote-code-execution-in-configuration-api","title":"thorsten phpMyFAQ remote code execution in configuration API","severity":"info","exploited":false,"published_at":"2026-07-27T16:18:12.493+00:00","url":"https://junglewise.ai/threats/cve-2026-66398-thorsten-phpmyfaq-remote-code-execution-in-configuration-api"},{"cve":"CVE-2026-66397","cvss":8.6,"slug":"cve-2026-66397-phpmyfaq-path-traversal-in-category-image-deletion","title":"phpMyFAQ path traversal in category image deletion","severity":"info","exploited":false,"published_at":"2026-07-27T16:18:12.363+00:00","url":"https://junglewise.ai/threats/cve-2026-66397-phpmyfaq-path-traversal-in-category-image-deletion"},{"cve":"CVE-2026-57996","cvss":8.8,"slug":"cve-2026-57996-phpmyfaq-privilege-escalation-in-user-add-api-endpoint","title":"phpMyFAQ privilege escalation in user/add API endpoint","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:16.143+00:00","url":"https://junglewise.ai/threats/cve-2026-57996-phpmyfaq-privilege-escalation-in-user-add-api-endpoint"},{"cve":"CVE-2026-57994","cvss":5.3,"slug":"cve-2026-57994-phpmyfaq-information-disclosure-of-inactive-faq-content-in-public","title":"phpMyFAQ information disclosure of inactive FAQ content in public API","severity":"medium","exploited":false,"published_at":"2026-07-10T15:16:47.85+00:00","url":"https://junglewise.ai/threats/cve-2026-57994-phpmyfaq-information-disclosure-of-inactive-faq-content-in-public"},{"cve":"CVE-2026-57961","cvss":2.7,"slug":"cve-2026-57961-phpmyfaq-path-traversal-in-pdf-export-concatenatepaths-function","title":"phpMyFAQ path traversal in PDF export concatenatePaths function","severity":"low","exploited":false,"published_at":"2026-07-10T15:16:47.057+00:00","url":"https://junglewise.ai/threats/cve-2026-57961-phpmyfaq-path-traversal-in-pdf-export-concatenatepaths-function"},{"cve":"CVE-2026-57995","cvss":8.8,"slug":"cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller","title":"phpMyFAQ privilege escalation in GroupController updatePermissions","severity":"high","exploited":false,"published_at":"2026-06-30T23:17:32.537+00:00","url":"https://junglewise.ai/threats/cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller"},{"cvss":8.1,"slug":"phpmyfaq-privilege-escalation-via-incomplete-fix-in-usercontroller-api-93ecfd60","title":"phpMyFAQ privilege escalation via incomplete fix in UserController API","severity":"high","exploited":false,"published_at":"2026-06-26T21:23:37+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-via-incomplete-fix-in-usercontroller-api-93ecfd60"},{"cve":"CVE-2026-56396","cvss":8.8,"slug":"cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights","title":"phpMyFAQ privilege escalation in editUser and updateUserRights","severity":"high","exploited":false,"published_at":"2026-06-21T14:16:26.66+00:00","url":"https://junglewise.ai/threats/cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights"},{"cve":"CVE-2026-49205","cvss":6.5,"epss":0.0024,"slug":"cve-2026-49205-phpmyfaq-missing-authorization-in-api-write-endpoints","title":"phpMyFAQ missing authorization in API write endpoints","severity":"medium","exploited":false,"published_at":"2026-06-18T22:16:31.937+00:00","url":"https://junglewise.ai/threats/cve-2026-49205-phpmyfaq-missing-authorization-in-api-write-endpoints"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":4}],"related":[],"technology":{"hub":true,"name":"Thorsten phpMyFAQ","slug":"phpmyfaq","vendor":{"name":"Thorsten","slug":"thorsten","url":"https://junglewise.ai/threats/vendors/thorsten"},"aliases":[],"category":"cms","homepage":"https://www.phpmyfaq.de/","repo_url":"https://github.com/thorsten/phpMyFAQ","description":"phpMyFAQ is an open source FAQ software using PHP and various database systems.","url":"https://junglewise.ai/threats/technologies/phpmyfaq"},"most_severe":[{"cve":"CVE-2026-46364","cvss":9.8,"epss":0.0007,"slug":"cve-2026-46364-phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T19:17:03.75+00:00","url":"https://junglewise.ai/threats/cve-2026-46364-phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header"},{"cvss":9.8,"slug":"phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e"},{"cve":"CVE-2026-45010","cvss":9.1,"epss":0.0015,"slug":"cve-2026-45010-thorsten-phpmyfaq-2fa-bypass-via-brute-force-in-admin-check","title":"thorsten phpMyFAQ 2FA bypass via brute-force in /admin/check","severity":"critical","exploited":false,"published_at":"2026-05-15T19:17:01.45+00:00","url":"https://junglewise.ai/threats/cve-2026-45010-thorsten-phpmyfaq-2fa-bypass-via-brute-force-in-admin-check"},{"cvss":9.1,"slug":"phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c","title":"phpMyFAQ 2FA bypass via unauthenticated brute-force in admin check endpoint","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c"},{"cvss":8.8,"slug":"phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe","title":"phpMyFAQ privilege escalation in GroupController::updatePermissions","severity":"high","exploited":false,"published_at":"2026-08-25T17:32:07+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe"},{"cve":"CVE-2026-57996","cvss":8.8,"slug":"cve-2026-57996-phpmyfaq-privilege-escalation-in-user-add-api-endpoint","title":"phpMyFAQ privilege escalation in user/add API endpoint","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:16.143+00:00","url":"https://junglewise.ai/threats/cve-2026-57996-phpmyfaq-privilege-escalation-in-user-add-api-endpoint"},{"cve":"CVE-2026-57995","cvss":8.8,"slug":"cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller","title":"phpMyFAQ privilege escalation in GroupController updatePermissions","severity":"high","exploited":false,"published_at":"2026-06-30T23:17:32.537+00:00","url":"https://junglewise.ai/threats/cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller"},{"cve":"CVE-2026-56396","cvss":8.8,"slug":"cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights","title":"phpMyFAQ privilege escalation in editUser and updateUserRights","severity":"high","exploited":false,"published_at":"2026-06-21T14:16:26.66+00:00","url":"https://junglewise.ai/threats/cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights"},{"cve":"CVE-2026-35671","cvss":8.8,"slug":"cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint","title":"phpMyFAQ IDOR in admin API user password endpoint","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.53+00:00","url":"https://junglewise.ai/threats/cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint"},{"cvss":8.8,"slug":"phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089","title":"phpMyFAQ IDOR privilege escalation in Admin API password reset","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:17+00:00","url":"https://junglewise.ai/threats/phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}