https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:35:26.717634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-356949 EUVD-2026-356949 2026-10-05T18:35:26.770791+00:00 EUVD-2026-356949 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76211 fkie_cve-2026-76211 2026-10-05T18:35:26.770837+00:00

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind account names, search bases, index statistics, and site analytics by calling these endpoints with a valid session.

 https://cve.radiocsirt.org/vuln/ghsa-7r9q-gvqq-999j GHSA-7r9q-gvqq-999j 2026-10-05T18:35:26.770873+00:00

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind account names, search bases, index statistics, and site analytics by calling these endpoints with a valid session.