CVE-2026-116182

Published 25 October 2026 · tracked since 25 October 2026

Description

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can influence FAQ content can embed image URLs pointing to loopback or internal services, causing the server to request them and

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-116063 MEDIUM 4.7
• CVE-2026-116061 HIGH 7.3
• CVE-2026-116062 HIGH 7.3
• CVE-2026-116060 HIGH 7.3
• CVE-2026-116057 MEDIUM 6.3
• CVE-2026-116056 MEDIUM 6.3
• CVE-2026-116055 MEDIUM 6.3
• CVE-2026-116204 HIGH 8.1
• CVE-2026-116207 CRITICAL 9.1
• CVE-2026-116189 HIGH 7.5

→ Open the live CVE board · all tools