Authentication Bypass in phpMyFAQ Affecting Unauthenticated Users
CVE-2026-75918

8.7HIGH

Key Information:

Vendor

Thorsten

Status
pHPMyFAQ
Vendor
CVE Published:
19 August 2026

What is CVE-2026-75918?

phpMyFAQ versions before 4.1.7 are susceptible to an authentication bypass vulnerability due to the insecure storage of password reset tokens. When user tracking is enabled, these tokens are saved in a publicly accessible file. This allows unauthenticated attackers to access the tracking file and retrieve valid password reset tokens, enabling them to exploit the password reset mechanism and take control of user accounts. It's crucial for users to update to the latest version to protect against this potential breach.

Affected Version(s)

phpMyFAQ 0 < 4.1.7

phpMyFAQ 4.1.7

References

https://github.com/thorsten/phpMyFAQ/security/advisories/...
vendor-advisory
https://www.vulncheck.com/advisories/phpmyfaq-before-auth...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

kevinnivekkevin
.