Threats Tagged 'cve-2026-66398'
View all threats tagged with 'cve-2026-66398'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-66398'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-66398: Download of Code Without Integrity Check in thorsten phpMyFAQCVE-2026-66398 0 phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHMENT_ADD privileges to write arbitrary PHP files by manipulating the upgrade.lastDownloadedPackage setting. Attackers can upload a malicious ZIP file as an attachment, point the updater configuration to its stored path, and extract it into the application root to achieve code execution as the web server user. Join the discussion | CVE Database V5 | 07/27/2026, 15:43:48 UTC Added: 07/27/2026, 16:23:31 UTC |
Showing 1 to 1 of 1 result