https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:41:06.622565+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-85589 CVE-2026-85589 — phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard API 2026-10-07T07:41:06.642567+00:00

Affected: thorsten phpMyFAQ

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks. Any authenticated user can access these endpoints to read site-wide search statistics and content-health counters regardless of their privilege level.