https://vulnerability.circl.lu/sightings/feed 2026-09-25T14:51:13.052334+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8c8a0179-9eaf-4ed3-81c5-c8361ca18d52/export 2026-09-25T14:51:13.080349+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8c8a0179-9eaf-4ed3-81c5-c8361ca18d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56737", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwc375slnz26", "content": "CVE-2026-56737: phpMyFAQ's two-factor login endpoint grants access on a valid TOTP code and chosen user ID alone, without verifying the password, allowing an authentication bypass on 2FA-enabled accounts. Fixed in phpMyFAQ 4.1.6. No exploitation confirmed.", "creation_timestamp": "2026-09-24T20:17:34.269466Z"} 2026-09-24T20:17:34.269466+00:00 https://vulnerability.circl.lu/sighting/25650203-39e4-4302-a0d9-617b7c9f3c8e/export 2026-09-25T14:51:13.083357+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "25650203-39e4-4302-a0d9-617b7c9f3c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56737", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbpkrqb4325", "content": "\ud83d\udfe0 CVE-2026-56737 - High (8.1)\n\nphpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56737/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T16:49:19.863694Z"} 2026-09-24T16:49:19.863694+00:00 https://vulnerability.circl.lu/sighting/e9775795-7b91-4d10-98ea-141959119a48/export 2026-09-25T14:51:13.083503+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "e9775795-7b91-4d10-98ea-141959119a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56737", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5", "content": "", "creation_timestamp": "2026-07-13T12:55:56.000000Z"} 2026-07-13T12:55:56+00:00