CVE-2026-76206
MediumCVSS 5.3Summary
phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access the public PDF export route with sequential FAQ identifiers to obtain titles, solution IDs, author names, and last-update timestamps of inactive or unpublished FAQs.
Risk Assessment
The risk is the disclosure of sensitive metadata of unpublished content, which could compromise information confidentiality and aid attackers in further attacks.
Recommendation
It is recommended to upgrade phpMyFAQ to version 4.1.7 or later, which includes a fix for the active status validation in the PDF export.
Original NVD description (English source)
phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access the public PDF export route with sequential FAQ identifiers to obtain titles, solution IDs, author names, and last-update timestamps of inactive or unpublished FAQs.