P
Vendor security profile
phpmyfaq
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical4
CISA KEV0
Public exploit22
Patch rate%23
Avg. CVSS7.2
12-month vulnerability rate
1
2
0
0
0
2
0
0
1
14
8
2
CVE KEV
CVE severity distribution
31toplam CVE
Critical4 (13%)
High12 (39%)
Medium15 (48%)
Patch and exploitation view
%23
Verified patch
%0
CISA KEV
%71
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
24Unknown
Latest vulnerabilities
6.9
CVE-2026-76215
phpMyFAQ before 4.1.7 Missing Authorization via child resources
T
Patch status unknownEPSS %0
9.1
CVE-2026-76214
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
T
Patch status unknownEPSS %0
9.1
CVE-2026-76213
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
T
Patch status unknownEPSS %0
6.9
CVE-2026-76212
phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
T
Patch status unknownEPSS %0
5.3
CVE-2026-76211
phpMyFAQ before 4.1.7 Information Disclosure via Admin API
T
Patch status unknownEPSS %0
7.1
CVE-2026-76210
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
T
Patch status unknownEPSS %0
5.3
CVE-2026-76209
phpMyFAQ before v4.1.6 Registration Bypass via API
T
Patch status unknownEPSS %0
8.8
CVE-2026-76208
phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
T
Patch status unknownEPSS %0
8.6
CVE-2026-76207
phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
T
Patch status unknownEPSS %0
6.9
CVE-2026-76206
phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
T
Patch status unknownEPSS %0