CVE-2026-76215 phpMyFAQ before 4.1.7 Missing Authorization via child resources

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...

CVE-2026-76215 phpMyFAQ before 4.1.7 Missing Authorization via child resources

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...

ECHO-9151-32E7-325F

Bulletin has no description...

MINI-PW26-36QR-W87G

Bulletin has no description...

MINI-97P5-4X2R-9297

Bulletin has no description...

MINI-QRF6-GGC7-QMPX

Bulletin has no description...

MINI-7C2M-PHM6-CHMH

Bulletin has no description...

MINI-CMG4-CFFF-9MQJ

Bulletin has no description...

MINI-8V3M-X55V-2RJ9

Bulletin has no description...

MINI-HHGW-9MWJ-PRPX

Bulletin has no description...

MINI-XWWC-Q3C7-9MCC

Bulletin has no description...

MINI-Q3VJ-V22J-QVRH

Bulletin has no description...

MINI-JM2R-36X3-H469

Bulletin has no description...

MINI-F9MV-FWM9-4HWQ

Bulletin has no description...

MINI-PCGQ-WV8F-PJGW

Bulletin has no description...

MINI-2XM9-JFP3-WW2J

Bulletin has no description...

MINI-C8M7-5VP6-MR9J

Bulletin has no description...

MINI-RCHR-GQC4-76MG

Bulletin has no description...

MINI-J6QX-PJ34-HF5X

Bulletin has no description...

MINI-XRXX-4RPP-QQ2M

Bulletin has no description...