P
Vendor security profile
phpmyfaq
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs30
Critical3
CISA KEV0
Public exploit20
Patch rate%13
Avg. CVSS7.1
12-month vulnerability rate
1
2
0
0
0
2
0
0
1
14
8
1
CVE KEV
CVE severity distribution
30toplam CVE
Critical3 (10%)
High12 (40%)
Medium15 (50%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%67
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
26Unknown
Latest vulnerabilities
6.9
CVE-2026-76215
phpMyFAQ before 4.1.7 Missing Authorization via child resources
T
Patch status unknownEPSS %0
9.1
CVE-2026-76214
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
T
Patch status unknownEPSS %0
9.1
CVE-2026-76213
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
T
Patch status unknownEPSS %0
6.9
CVE-2026-76212
phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
T
Patch status unknownEPSS %0
5.3
CVE-2026-76211
phpMyFAQ before 4.1.7 Information Disclosure via Admin API
T
Patch status unknownEPSS %0
7.1
CVE-2026-76210
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
T
Patch status unknownEPSS %0
5.3
CVE-2026-76209
phpMyFAQ before v4.1.6 Registration Bypass via API
T
Patch status unknownEPSS %0
8.8
CVE-2026-76208
phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
T
Patch status unknownEPSS %0
8.6
CVE-2026-76207
phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
T
Patch status unknownEPSS %0
6.9
CVE-2026-76206
phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
T
Patch status unknownEPSS %0