phpMyFAQ's two-factor authentication login bypasses the password factor

Summary The public two-factor verification endpoint POST /check logs a user in based solely on a valid 6-digit TOTP token and a chosen user-id. It does not require — and is not bound to — a prior successful password authentication. For any account that has 2FA enabled, an unauthenticated attacker...

GHSA-8GPW-XVPF-HVX5 phpMyFAQ's two-factor authentication login bypasses the password factor

Summary The public two-factor verification endpoint POST /check logs a user in based solely on a valid 6-digit TOTP token and a chosen user-id. It does not require — and is not bound to — a prior successful password authentication. For any account that has 2FA enabled, an unauthenticated attacker...

PT-2026-97855

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0 through 4.1.5 Description An authentication bypass exists in the public two-factor authentication 2FA verification flow. An unauthenticated attacker can take over any account that has 2FA enabled, including administrato...

PT-2026-69677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Out-of-bounds reads occur in three sideband reply parsers when reading 16-bit fields. The issue arises because bounds are checked only after the read operation. Specifically, when the...

CVE-2026-3906 WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API

WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature block-level collaboration annotations was introduced in WordPress 6.9 to allow editorial comments directly on posts in the block editor. However, the REST API createitempermissionscheck method in...

CVE-2026-2074

CVE-2026-2074 affects O2OA versions up to 9.0.0, impacting the HTTP POST Request Handler at the path /x_program_center/jaxrs/mpweixin/check. The issue is an XML External Entity (XXE) reference due to a manipulated input, enabling remote initiation of the attack. Public exploit is available and ha...

PT-2022-2223

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/check reg verify code function, which could allow a remote malicious user to execute arbitrary code via a crafted post request...

PT-2022-2224

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description The issue is caused by a buffer overflow in the /cloud config/router post/check reset pwd verify code interface of the TP-LINK WR-886N router's firmware. This can allow a remote attacker to...