PT-2026-41368 · Thorsten · Phpmyfaq

Adrgs · Published 2026-05-15 · Updated 2026-05-15 · CVE-2026-46366

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to enumerate restricted FAQ entries and read their titles via the /solution id {id}.html endpoint. Attackers can sequentially iterate solution IDs to discover all FAQs including those restricted to specific users or groups, leaking sensitive metadata through redirect Location headers and page canonical links.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-46366

Affected Products

Phpmyfaq

References · 3

• 🔥 https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-99qv-g4x9-mgc3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-46366 · Security Note
• https://vulncheck.com/advisories/phpmyfaq-unauthenticated-information-disclosure-via-getidfromsolutionid-permission-bypass · Note