CVE-2026-27932

creationtimestamp| type| source ---|---|--- 2026-02-28 07:48:01+00:00| published-proof-of-concept| https://github.com/authlib/joserfc/security/advisories/GHSA-w5r5-m38g-f9f9 2026-03-03 23:57:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xvkwteq2u 2026-03-04 07:49:47+00:00|...

CVE-2026-25927

creationtimestamp| type| source ---|---|--- 2026-02-28 07:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfvpvdtywu2e...

CVE-2026-2471

creationtimestamp| type| source ---|---|--- 2026-02-28 07:18:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvonom5wm2n 2026-02-28 09:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfvx3dqb2p2v 2026-02-28 10:09:47+00:00| seen|...

GHSA-F2V5-7JQ9-H8CG

creationtimestamp| type| source ---|---|--- 2026-02-28 07:10:10+00:00| seen| https://gist.github.com/alon710/8c701e4c3b2c6c36535c668dab067b3c...

CVE-2026-28279

creationtimestamp| type| source ---|---|--- 2026-02-28 06:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfvlgagipm2h 2026-02-28 07:40:11+00:00| seen| https://gist.github.com/alon710/ad7fc02718b15a210a981448af582910 2026-02-28 07:54:32+00:00| seen|...

GHSA-945P-3JHM-6RCP

creationtimestamp| type| source ---|---|--- 2026-02-28 03:40:10+00:00| seen| https://gist.github.com/alon710/43a4ce973e7deb9cb22c759bda6c4252...

CVE-2026-22722

creationtimestamp| type| source ---|---|--- 2026-02-28 03:31:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfvbybg7ae2c...

GHSA-5C6J-R48X-RMVQ

creationtimestamp| type| source ---|---|--- 2026-02-28 03:10:11+00:00| seen| https://gist.github.com/alon710/d1eb861b7784463c434753842ee96c85 2026-04-03 15:44:39+00:00| seen| https://gist.github.com/kbellioum/2aaedb76430c4e5fc2f81d1185d752b6 2026-04-21 11:56:50+00:00| seen|...

GHSA-6MQ3-XMGP-PJM5

creationtimestamp| type| source ---|---|--- 2026-02-28 01:10:11+00:00| seen| https://gist.github.com/alon710/26ad557fbd4646a04459f43b9aa9e194...

GHSA-RW9X-PXQX-Q789

creationtimestamp| type| source ---|---|--- 2026-02-28 00:10:11+00:00| seen| https://gist.github.com/alon710/ec22814fdc2305d798b5b3216cff5a34...

CVE-2026-28402

creationtimestamp| type| source ---|---|--- 2026-02-27 23:36:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuuu6sb7a2v...

CVE-2026-28355

creationtimestamp| type| source ---|---|--- 2026-02-27 23:33:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuuo7pufx2y...

GHSA-282G-FHMX-XF54

creationtimestamp| type| source ---|---|--- 2026-02-27 21:40:11+00:00| seen| https://gist.github.com/alon710/b80b546288fad3926bdbc67b49b19ff1...

CVE-2026-27755

creationtimestamp| type| source ---|---|--- 2026-02-27 21:14:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfumxbcsly2n 2026-02-28 06:03:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvkilemo52s 2026-02-28 07:30:28+00:00| seen|...

CVE-2026-27542

creationtimestamp| type| source ---|---|--- 2026-02-27 21:03:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mfumc2bm7g2h 2026-03-19 06:36:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhff73qiox2s 2026-03-19 08:14:14+00:00| seen|...

Missing Authorization

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization via the WebAuthnController::prepare endpoint in the Frontend WebAuthn API component. An unauthenticated attacker can create...

GHSA-W22Q-M2FM-X9F4 phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint

Summary The WebAuthn prepare endpoint /api/webauthn/prepare creates new active user accounts without any authentication, CSRF protection, CAPTCHA, or configuration checks. This allows unauthenticated attackers to create unlimited user accounts even when registration is disabled. Details File:...

phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint

Summary The WebAuthn prepare endpoint /api/webauthn/prepare creates new active user accounts without any authentication, CSRF protection, CAPTCHA, or configuration checks. This allows unauthenticated attackers to create unlimited user accounts even when registration is disabled. Details File:...

CVE-2026-26862

creationtimestamp| type| source ---|---|--- 2026-02-27 20:56:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfulwya7kf2v 2026-02-28 07:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvno5g7kt2v...

CVE-2025-69437

creationtimestamp| type| source ---|---|--- 2026-02-27 20:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfulqhccde2x 2026-02-28 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvnom5l4m2d...