Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-76207

1 brief RSS
high advisory

Information Exposure in phpMyFAQ Password Reset Mechanism

Versions of phpMyFAQ prior to 4.1.7 store password reset tokens in a publicly accessible file when user tracking is enabled, allowing unauthenticated attackers to hijack accounts.

phpMyFAQ sql-injection web-vulnerability web-application authentication-bypass cve-2026-76207
2r 4t 1c