#phpMyFAQ
All CosmicBytez Labs articles tagged #phpMyFAQ, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-124432: phpMyFAQ Passkey Endpoint Enables Account Enumeration
phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 leak which accounts use passkeys via the unauthenticated prepare-login endpoint.
- Security
CVE-2026-111884: phpMyFAQ Account Takeover via Unverified Email Change
phpMyFAQ lets a hijacked session change a user's email with no password check, enabling takeover of non-2FA accounts, including superadmin.
- Security
CVE-2026-111882: phpMyFAQ SSO Callback Lets Attackers Skip TOTP 2FA
A phpMyFAQ auth bypass lets anyone with a valid IdP identity skip TOTP via Keycloak or Entra ID SSO callbacks, landing an authenticated session.
- Security
CVE-2026-56736: phpMyFAQ Stored XSS via Admin Review
Unauthenticated users can plant stored XSS in phpMyFAQ FAQ submissions that executes in an admin's browser on review, enabling session theft.
- Security
CVE-2026-35676: phpMyFAQ Unauthenticated Password Reset Vulnerability
phpMyFAQ before 4.1.3 contains a CVSS 8.2 flaw allowing unauthenticated attackers to reset any account password without token validation, enabling full...