CVE-2026-76209: Missing Authorization in thorsten phpMyFAQ
Description
phpMyFAQ versions before 4.1.6 contain a vulnerability where the security.enableRegistration setting is not validated in certain API endpoints. This allows attackers to create user accounts even when registration is disabled via the web interface. The flaw affects the POST /api/register and POST /api/v3.1/register endpoints, which bypass the intended registration restriction.
CVSS v4.0
Score 5.3medium
Affected software
thorsten
phpMyFAQ
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-76209 is a missing authorization vulnerability in phpMyFAQ prior to version 4.1.6. The application fails to enforce the security.enableRegistration configuration flag in specific API endpoints, allowing attackers to create user accounts despite registration being disabled. The affected endpoints are POST /api/register and POST /api/v3.1/register, which do not check the registration setting enforced by the HTML registration page, resulting in unauthorized account creation.
Potential Impact
Attackers can bypass the disabled registration setting and create user accounts via the vulnerable API endpoints. This could lead to unauthorized access or abuse of the system by unauthorized users. The CVSS 4.0 score is 5.3 (medium severity), indicating a moderate impact without requiring user interaction or privileges beyond low-level access.
Mitigation Recommendations
Upgrade phpMyFAQ to version 4.1.6 or later, where this vulnerability is fixed. Since the vulnerability is addressed in the official release, applying this update is the recommended remediation. No other temporary mitigations are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-19T11:34:28.576Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a85bc76acd9273b492f4980
Added to database: 08/19/2026, 14:23:50 UTC
Last enriched: 09/11/2026, 08:49:02 UTC
Last updated: 10/04/2026, 10:02:29 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.