Security Advisory

CVE-2026-48488

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-08 15:15:12

Last updated 2026-06-09 14:36:01

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerable to collision attacks since 2017 (SHAttered). Version 4.1.4 fixes the issue.

← Browse all CVEs View on cve.org ↗