CVE-2026-76214: Authentication Bypass by Capture-replay in thorsten phpMyFAQ
Description
phpMyFAQ versions before 4.1.7 have an authentication bypass vulnerability due to failure to persist the WebAuthn login challenge. This allows an attacker who captures a valid WebAuthn assertion to replay it indefinitely and authenticate as the user without interaction or hardware key.
CVSS v4.0
Score 9.1critical
Affected software
thorsten
phpMyFAQ
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
phpMyFAQ prior to version 4.1.7 does not save the mutated WebAuthn key objects generated by prepareForLogin back to the database, causing the anti-replay check to be skipped during login. This flaw enables an attacker who captures a successful WebAuthn assertion to replay it repeatedly, bypassing authentication controls and gaining unauthorized access without user interaction or possession of the hardware key.
Potential Impact
An attacker can authenticate as any user by replaying a captured WebAuthn assertion indefinitely, effectively bypassing the authentication mechanism. This compromises account security and allows unauthorized access without requiring user interaction or hardware possession.
Mitigation Recommendations
Patch to phpMyFAQ version 4.1.7 or later where this issue is fixed. Since no vendor advisory or patch link is provided, verify with the official phpMyFAQ project for the availability of the fix. Until patched, consider disabling WebAuthn login or implementing additional controls to prevent replay attacks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-19T11:34:28.577Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a85bc76acd9273b492f498c
Added to database: 08/19/2026, 14:23:50 UTC
Last enriched: 09/11/2026, 08:48:26 UTC
Last updated: 10/04/2026, 10:02:29 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.