CVE-2026-76205 phpMyFAQ before 4.1.7 SQL Injection via Glossary
Authenticated users with glossary permissions can inject SQL to read sensitive database information in phpMyFAQ.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-76205?
CVE-2026-76205 is a high-severity SQL injection vulnerability in Phpmyfaq Phpmyfaq, published on 19 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL literal. Authenticated users with glossary add or edit permissions can craft a payload with a dangling backslash to escape the closing quote and inject arbitrary SQL commands to read sensitive database information.
Weakness: CWE-89
Which versions are affected by CVE-2026-76205?
It affects 1 product.
Products include Phpmyfaq Phpmyfaq.
How do I fix CVE-2026-76205?
No fix has been published for CVE-2026-76205 yet. Limit exposure of the affected software until one is available.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2026-76205 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-76205 exists.
Other vulnerabilities in Phpmyfaq Phpmyfaq
- CVE-2023-0310 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2022-4407 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
- CVE-2017-11187 Security feature bypass in n/a
- CVE-2026-76213 phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
- CVE-2026-76214 phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
Sources
Also known as GHSA-79h3-6hxj-g98h, GHSA-gvqv-x9gq-w33g.