CVE-2026-75920

6.0 mediumEPSS 0.4%

Medium (6.0) in phpmyfaq phpmyfaq. EPSS 0.4% chance of exploitation in the next 30 days.

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.

Severity

CVSS 4.0

6.0 medium

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-377
Published: 2026-08-19
Modified: 2026-09-01
Record from: the NVD, synced 2026-10-19

Affected

phpmyfaq:phpmyfaq

References

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8hmh-mrx6-pqvf
https://www.vulncheck.com/advisories/phpmyfaq-before-information-disclosure-via-backup-zip

Check your stack JSON