CVE-2026-76213

creationtimestamp| type| source ---|---|--- 2026-08-19 16:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4jgo5ot2j 2026-08-19 16:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth5pbc5nr2t...

CVE-2026-76213 phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cook...