Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:28:43 +0000 bdu:2026-12611 https://cve.radiocsirt.org/vuln/bdu:2026-12611 bdu:2026-12611 https://cve.radiocsirt.org/vuln/bdu:2026-12611 EUVD-2026-356719 https://cve.radiocsirt.org/vuln/euvd-2026-356719 EUVD-2026-356719 https://cve.radiocsirt.org/vuln/euvd-2026-356719 fkie_cve-2026-76209 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76209 <p>phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled. Attackers can bypass the registration restriction by submitting requests to POST /api/register or POST /api/v3.1/register endpoints, which do not check the configuration flag enforced by the HTML registration page.</p> <p>phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled. Attackers can bypass the registration restriction by submitting requests to POST /api/register or POST /api/v3.1/register endpoints, which do not check the configuration flag enforced by the HTML registration page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-76209 GHSA-fh25-jpw4-vg4p https://cve.radiocsirt.org/vuln/ghsa-fh25-jpw4-vg4p <p>phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled. Attackers can bypass the registration restriction by submitting requests to POST /api/register or POST /api/v3.1/register endpoints, which do not check the configuration flag enforced by the HTML registration page.</p> <p>phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled. Attackers can bypass the registration restriction by submitting requests to POST /api/register or POST /api/v3.1/register endpoints, which do not check the configuration flag enforced by the HTML registration page.</p> https://cve.radiocsirt.org/vuln/ghsa-fh25-jpw4-vg4p