Threats tagged 'ghsa-prvh-6vp9-668j'

1 threat

Threats tagged 'ghsa-prvh-6vp9-668j'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-85588phpMyFAQ · Exposure of Sensitive Information to an Unauthorized Actor Medium5.3EPSS 0.5%2026-09-04CVE Database V5CVE-2026-85588 phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files. Attackers obtaining exported archives can extract the TOTP seed and generate valid one-time codes to bypass two-factor authentication. EPSS 0.5%Vulnerability thorsten #ghsa-prvh-6vp9-668j	CVE Database V5	2026-09-04

Showing 1–1 of 1 result