Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck
CVE-2026-85588phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export
Medium 5.3
In plain English
A medium-severity information exposure in phpMyFAQ from thorsten. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 4.0)5.3Medium
Exploit odds (30 days)0.5%top 55.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files. Attackers obtaining exported archives can extract the TOTP seed and generate valid one-time codes to bypass two-factor authentication.
Affected products (as reported)
Weakness: CWE-200 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
References
- GitHub Security Advisory (GHSA-xhgx-2wj8-g4pj) vendor-advisory
- VulnCheck Advisory: phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export third-party-advisory