https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:53:15.583514+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14265 bdu:2026-14265 2026-10-03T14:53:15.646090+00:00 bdu:2026-14265 https://cve.radiocsirt.org/vuln/euvd-2026-364012 EUVD-2026-364012 2026-10-03T14:53:15.646128+00:00 EUVD-2026-364012 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85587 fkie_cve-2026-85587 2026-10-03T14:53:15.646142+00:00

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public.

 https://cve.radiocsirt.org/vuln/ghsa-jp5x-wfgj-283r GHSA-jp5x-wfgj-283r 2026-10-03T14:53:15.646172+00:00

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public.