https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:27:07.495445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14266 bdu:2026-14266 2026-10-02T13:27:07.574976+00:00 bdu:2026-14266 https://cve.radiocsirt.org/vuln/euvd-2026-364011 EUVD-2026-364011 2026-10-02T13:27:07.575020+00:00 EUVD-2026-364011 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85592 fkie_cve-2026-85592 2026-10-02T13:27:07.575042+00:00

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed() method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers can submit questions via the question/create API endpoint to bypass guest submission restrictions and inject spam into the admin moderation queue.

 https://cve.radiocsirt.org/vuln/ghsa-447p-f6x5-rw98 GHSA-447p-f6x5-rw98 2026-10-02T13:27:07.575088+00:00

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed() method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers can submit questions via the question/create API endpoint to bypass guest submission restrictions and inject spam into the admin moderation queue.