https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:59:04.691767+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-357492 EUVD-2026-357492 2026-10-06T10:59:04.745605+00:00 EUVD-2026-357492 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76215 fkie_cve-2026-76215 2026-10-06T10:59:04.745645+00:00

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by querying the comments and attachments API endpoints.

 https://cve.radiocsirt.org/vuln/ghsa-jqpp-mfm2-hfw2 GHSA-jqpp-mfm2-hfw2 2026-10-06T10:59:04.745678+00:00

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by querying the comments and attachments API endpoints.