CVE-2026-76206CWE-200information-disclosure

CVE-2026-76206

Medium · published August 19, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access the public PDF export route with sequential FAQ identifiers to obtain titles, solution IDs, author names, and last-update timestamps of inactive or unpublished FAQs.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00362 · 28.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-08-19T18:17Z
Affected products (1)
ProductVersionsFixed in
phpmyfaq/phpmyfaq< 4.1.74.1.7
References (2)
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-f8pr-32pp-mp7h · [email protected]https://www.vulncheck.com/advisories/phpmyfaq-before-information-disclosure-via-pdf-export · [email protected]
EPSS history
Timeline
  • 19 AUG 14:01Z
    phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
    cvelistv5