{"schema_version":1,"title":"Thorsten vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 41 vulnerabilities in Thorsten: 1 in the last 7 days and 8 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-47132, was published on 24 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/thorsten","json_url":"https://junglewise.ai/threats/vendors/thorsten.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/thorsten","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":15,"all_time":41,"critical":4,"exploited":0,"last_7_days":1,"last_30_days":4,"last_90_days":8,"last_365_days":41},"latest":[{"cve":"CVE-2026-47132","cvss":5.4,"epss":0.0025,"slug":"cve-2026-47132-phpmyfaq-sql-like-wildcard-injection-in-chat-user-search","title":"phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in","severity":"medium","exploited":false,"published_at":"2026-09-24T17:17:04.723+00:00","url":"https://junglewise.ai/threats/cve-2026-47132-phpmyfaq-sql-like-wildcard-injection-in-chat-user-search"},{"cve":"CVE-2026-85592","cvss":3.7,"epss":0.0031,"slug":"cve-2026-85592-phpmyfaq-authorization-bypass-in-question-creation-endpoint","title":"phpMyFAQ authorization bypass in question creation endpoint","severity":"low","exploited":false,"published_at":"2026-09-04T12:17:22.557+00:00","url":"https://junglewise.ai/threats/cve-2026-85592-phpmyfaq-authorization-bypass-in-question-creation-endpoint"},{"cve":"CVE-2026-85590","cvss":7.1,"epss":0.0052,"slug":"cve-2026-85590-phpmyfaq-two-factor-authentication-bypass-via-insufficient-re","title":"phpMyFAQ two-factor authentication bypass via insufficient re-authentication","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:21.327+00:00","url":"https://junglewise.ai/threats/cve-2026-85590-phpmyfaq-two-factor-authentication-bypass-via-insufficient-re"},{"cve":"CVE-2026-85588","cvss":5.3,"epss":0.0053,"slug":"cve-2026-85588-phpmyfaq-sensitive-information-disclosure-in-user-data-export","title":"phpMyFAQ sensitive information disclosure in user data export","severity":"info","exploited":false,"published_at":"2026-09-04T12:17:21.013+00:00","url":"https://junglewise.ai/threats/cve-2026-85588-phpmyfaq-sensitive-information-disclosure-in-user-data-export"},{"cvss":8.8,"slug":"phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe","title":"phpMyFAQ privilege escalation in GroupController::updatePermissions","severity":"high","exploited":false,"published_at":"2026-08-25T17:32:07+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe"},{"cve":"CVE-2026-66399","cvss":6.5,"slug":"cve-2026-66399-thorsten-phpmyfaq-privilege-escalation-in-groupcontroller","title":"thorsten phpMyFAQ privilege escalation in GroupController","severity":"medium","exploited":false,"published_at":"2026-07-27T16:18:12.633+00:00","url":"https://junglewise.ai/threats/cve-2026-66399-thorsten-phpmyfaq-privilege-escalation-in-groupcontroller"},{"cve":"CVE-2026-66398","cvss":9.4,"slug":"cve-2026-66398-thorsten-phpmyfaq-remote-code-execution-in-configuration-api","title":"thorsten phpMyFAQ remote code execution in configuration API","severity":"info","exploited":false,"published_at":"2026-07-27T16:18:12.493+00:00","url":"https://junglewise.ai/threats/cve-2026-66398-thorsten-phpmyfaq-remote-code-execution-in-configuration-api"},{"cve":"CVE-2026-66397","cvss":8.6,"slug":"cve-2026-66397-phpmyfaq-path-traversal-in-category-image-deletion","title":"phpMyFAQ path traversal in category image deletion","severity":"info","exploited":false,"published_at":"2026-07-27T16:18:12.363+00:00","url":"https://junglewise.ai/threats/cve-2026-66397-phpmyfaq-path-traversal-in-category-image-deletion"},{"cvss":8.1,"slug":"phpmyfaq-privilege-escalation-via-incomplete-fix-in-usercontroller-api-93ecfd60","title":"phpMyFAQ privilege escalation via incomplete fix in UserController API","severity":"high","exploited":false,"published_at":"2026-06-26T21:23:37+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-via-incomplete-fix-in-usercontroller-api-93ecfd60"},{"cve":"CVE-2026-49205","cvss":6.5,"epss":0.0039,"slug":"cve-2026-49205-phpmyfaq-missing-authorization-in-api-write-endpoints","title":"phpMyFAQ missing authorization in API write endpoints","severity":"medium","exploited":false,"published_at":"2026-06-18T22:16:31.937+00:00","url":"https://junglewise.ai/threats/cve-2026-49205-phpmyfaq-missing-authorization-in-api-write-endpoints"},{"cve":"CVE-2026-48488","cvss":4,"epss":0.0028,"slug":"cve-2026-48488-phpmyfaq-weak-cryptographic-hash-for-attachment-passwords","title":"phpMyFAQ weak cryptographic hash for attachment passwords","severity":"medium","exploited":false,"published_at":"2026-06-08T16:16:43.227+00:00","url":"https://junglewise.ai/threats/cve-2026-48488-phpmyfaq-weak-cryptographic-hash-for-attachment-passwords"},{"cve":"CVE-2026-35676","cvss":8.2,"epss":0.0033,"slug":"cve-2026-35676-phpmyfaq-unauthenticated-password-reset-in-user-password-update","title":"phpMyFAQ unauthenticated password reset in user password update API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.923+00:00","url":"https://junglewise.ai/threats/cve-2026-35676-phpmyfaq-unauthenticated-password-reset-in-user-password-update"},{"cve":"CVE-2026-35675","cvss":8.2,"epss":0.0046,"slug":"cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api","title":"phpMyFAQ authentication bypass in password reset API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.8+00:00","url":"https://junglewise.ai/threats/cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api"},{"cve":"CVE-2026-35672","cvss":7.5,"epss":0.0056,"slug":"cve-2026-35672-phpmyfaq-authentication-bypass-in-rest-api-v4-0","title":"phpMyFAQ authentication bypass in REST API v4.0","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.667+00:00","url":"https://junglewise.ai/threats/cve-2026-35672-phpmyfaq-authentication-bypass-in-rest-api-v4-0"},{"cve":"CVE-2026-35671","cvss":8.8,"epss":0.0044,"slug":"cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint","title":"phpMyFAQ IDOR in admin API user password endpoint","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.53+00:00","url":"https://junglewise.ai/threats/cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint"},{"cvss":8.2,"slug":"phpmyfaq-account-takeover-via-weak-password-recovery-mechanism-b9c11aaa","title":"phpMyFAQ account takeover via weak password recovery mechanism","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:55+00:00","url":"https://junglewise.ai/threats/phpmyfaq-account-takeover-via-weak-password-recovery-mechanism-b9c11aaa"},{"cvss":7.5,"slug":"phpmyfaq-auth-bypass-via-default-empty-api-token-430bee97","title":"phpMyFAQ auth bypass via default empty API token","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:42+00:00","url":"https://junglewise.ai/threats/phpmyfaq-auth-bypass-via-default-empty-api-token-430bee97"},{"cvss":8.8,"slug":"phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089","title":"phpMyFAQ IDOR privilege escalation in Admin API password reset","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:17+00:00","url":"https://junglewise.ai/threats/phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089"},{"cvss":8.2,"slug":"phpmyfaq-weak-password-recovery-in-unauthorizedusercontroller-fb01efd0","title":"phpMyFAQ weak password recovery in UnauthorizedUserController","severity":"high","exploited":false,"published_at":"2026-05-20T15:45:53+00:00","url":"https://junglewise.ai/threats/phpmyfaq-weak-password-recovery-in-unauthorizedusercontroller-fb01efd0"},{"cvss":7.5,"slug":"phpmyfaq-sql-injection-in-currentuser-settokendata-3dcbb4d3","title":"phpMyFAQ SQL injection in CurrentUser::setTokenData","severity":"high","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-sql-injection-in-currentuser-settokendata-3dcbb4d3"},{"cvss":6.9,"slug":"phpmyfaq-stored-xss-in-search-result-rendering-9f7f3087","title":"phpMyFAQ stored XSS in search result rendering","severity":"medium","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-stored-xss-in-search-result-rendering-9f7f3087"},{"cvss":9.1,"slug":"phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c","title":"phpMyFAQ 2FA bypass via unauthenticated brute-force in admin check endpoint","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c"},{"cvss":4.3,"slug":"phpmyfaq-missing-authorization-in-admin-api-configuration-endpoints-89d3b47f","title":"phpMyFAQ missing authorization in Admin API configuration endpoints","severity":"medium","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-missing-authorization-in-admin-api-configuration-endpoints-89d3b47f"},{"cvss":6.5,"slug":"phpmyfaq-authorization-bypass-in-abstractadministrationcontroller-4d6c5440","title":"phpMyFAQ authorization bypass in AbstractAdministrationController","severity":"medium","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-authorization-bypass-in-abstractadministrationcontroller-4d6c5440"},{"cvss":7.5,"slug":"phpmyfaq-information-disclosure-via-solution-id-permission-bypass-f1d9aedf","title":"phpMyFAQ information disclosure via solution ID permission bypass","severity":"high","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-information-disclosure-via-solution-id-permission-bypass-f1d9aedf"}],"vendor":{"hub":true,"name":"Thorsten","slug":"thorsten","homepage":"https://www.phpmyfaq.de/","description":"Thorsten Rinne is the lead developer and maintainer of the phpMyFAQ project.","url":"https://junglewise.ai/threats/vendors/thorsten"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1}],"most_severe":[{"cve":"CVE-2026-46364","cvss":9.8,"epss":0.0212,"slug":"cve-2026-46364-phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T19:17:03.75+00:00","url":"https://junglewise.ai/threats/cve-2026-46364-phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header"},{"cvss":9.8,"slug":"phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e"},{"cve":"CVE-2026-45010","cvss":9.1,"epss":0.0057,"slug":"cve-2026-45010-thorsten-phpmyfaq-2fa-bypass-via-brute-force-in-admin-check","title":"thorsten phpMyFAQ 2FA bypass via brute-force in /admin/check","severity":"critical","exploited":false,"published_at":"2026-05-15T19:17:01.45+00:00","url":"https://junglewise.ai/threats/cve-2026-45010-thorsten-phpmyfaq-2fa-bypass-via-brute-force-in-admin-check"},{"cvss":9.1,"slug":"phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c","title":"phpMyFAQ 2FA bypass via unauthenticated brute-force in admin check endpoint","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c"},{"cve":"CVE-2026-35671","cvss":8.8,"epss":0.0044,"slug":"cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint","title":"phpMyFAQ IDOR in admin API user password endpoint","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.53+00:00","url":"https://junglewise.ai/threats/cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint"},{"cvss":8.8,"slug":"phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe","title":"phpMyFAQ privilege escalation in GroupController::updatePermissions","severity":"high","exploited":false,"published_at":"2026-08-25T17:32:07+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe"},{"cvss":8.8,"slug":"phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089","title":"phpMyFAQ IDOR privilege escalation in Admin API password reset","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:17+00:00","url":"https://junglewise.ai/threats/phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089"},{"cve":"CVE-2026-35675","cvss":8.2,"epss":0.0046,"slug":"cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api","title":"phpMyFAQ authentication bypass in password reset API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.8+00:00","url":"https://junglewise.ai/threats/cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api"},{"cve":"CVE-2026-35676","cvss":8.2,"epss":0.0033,"slug":"cve-2026-35676-phpmyfaq-unauthenticated-password-reset-in-user-password-update","title":"phpMyFAQ unauthenticated password reset in user password update API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.923+00:00","url":"https://junglewise.ai/threats/cve-2026-35676-phpmyfaq-unauthenticated-password-reset-in-user-password-update"},{"cvss":8.2,"slug":"phpmyfaq-account-takeover-via-weak-password-recovery-mechanism-b9c11aaa","title":"phpMyFAQ account takeover via weak password recovery mechanism","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:55+00:00","url":"https://junglewise.ai/threats/phpmyfaq-account-takeover-via-weak-password-recovery-mechanism-b9c11aaa"}],"generated_at":"2026-09-26T20:07:00.238639+00:00","technologies":[{"name":"Thorsten phpMyFAQ","slug":"phpmyfaq","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/phpmyfaq"}]}