https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 25 Sep 2026 14:51:12 +0000 https://vulnerability.circl.lu/sighting/8c8a0179-9eaf-4ed3-81c5-c8361ca18d52/export {"uuid": "8c8a0179-9eaf-4ed3-81c5-c8361ca18d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56737", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwc375slnz26", "content": "CVE-2026-56737: phpMyFAQ's two-factor login endpoint grants access on a valid TOTP code and chosen user ID alone, without verifying the password, allowing an authentication bypass on 2FA-enabled accounts. Fixed in phpMyFAQ 4.1.6. No exploitation confirmed.", "creation_timestamp": "2026-09-24T20:17:34.269466Z"} {"uuid": "8c8a0179-9eaf-4ed3-81c5-c8361ca18d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56737", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwc375slnz26", "content": "CVE-2026-56737: phpMyFAQ's two-factor login endpoint grants access on a valid TOTP code and chosen user ID alone, without verifying the password, allowing an authentication bypass on 2FA-enabled accounts. Fixed in phpMyFAQ 4.1.6. No exploitation confirmed.", "creation_timestamp": "2026-09-24T20:17:34.269466Z"} https://vulnerability.circl.lu/sighting/8c8a0179-9eaf-4ed3-81c5-c8361ca18d52/export Thu, 24 Sep 2026 20:17:34 +0000 https://vulnerability.circl.lu/sighting/25650203-39e4-4302-a0d9-617b7c9f3c8e/export {"uuid": "25650203-39e4-4302-a0d9-617b7c9f3c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56737", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbpkrqb4325", "content": "\ud83d\udfe0 CVE-2026-56737 - High (8.1)\n\nphpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56737/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T16:49:19.863694Z"} {"uuid": "25650203-39e4-4302-a0d9-617b7c9f3c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56737", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbpkrqb4325", "content": "\ud83d\udfe0 CVE-2026-56737 - High (8.1)\n\nphpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56737/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T16:49:19.863694Z"} https://vulnerability.circl.lu/sighting/25650203-39e4-4302-a0d9-617b7c9f3c8e/export Thu, 24 Sep 2026 16:49:19 +0000 https://vulnerability.circl.lu/sighting/e9775795-7b91-4d10-98ea-141959119a48/export {"uuid": "e9775795-7b91-4d10-98ea-141959119a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56737", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5", "content": "", "creation_timestamp": "2026-07-13T12:55:56.000000Z"} {"uuid": "e9775795-7b91-4d10-98ea-141959119a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56737", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5", "content": "", "creation_timestamp": "2026-07-13T12:55:56.000000Z"} https://vulnerability.circl.lu/sighting/e9775795-7b91-4d10-98ea-141959119a48/export Mon, 13 Jul 2026 12:55:56 +0000