Main
Vulnerability Database
Exploits
ID:12631 - Exploit for Missing Authorization in phpMyFAQ - CVE-2026-27836
ID:12631 - Exploit for Missing Authorization in phpMyFAQ - CVE-2026-27836
Published: April 23, 2026
Vulnerability identifier: #VU126895
Vulnerability risk: Medium
CVE-ID: CVE-2026-27836
CWE-ID: CWE-862
Exploitation vector: Remote access
Vulnerable software:
phpMyFAQ
phpMyFAQ
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass authorization process.
The vulnerability exists due to incorrect authorization within the WebAuthn prepare endpoint. A remote attacker can create arbitrary accounts.
Remediation
Install updates from vendor's website.