How severe is CVE-2026-34973?

CVE-2026-34973 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2026-34973 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-34973?

CVE-2026-34973 affects Phpmyfaq. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-34973?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2026-34973 have an EU (EUVD) identifier?

Yes. CVE-2026-34973 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-18330.

When was CVE-2026-34973 published?

CVE-2026-34973 was published on 2026-04-02 and last updated on 2026-06-17.

CVE-2026-34973

CVE-2026-34973 is a medium-severity vulnerability in Phpmyfaq with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-943.

Key facts

Severity: Medium (CVSS 3.x base score 5.3)
CVSS v4: 6.9
EPSS exploit prediction: 0% (26th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-18330
Weakness: CWE-943
Affected product: Phpmyfaq
Published: 2026-04-02
Last modified: 2026-06-17

Description

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages() method in phpmyfaq/src/phpMyFAQ/Search.php uses real_escape_string() (via escape()) to sanitize the search term before embedding it in LIKE clauses. However, real_escape_string() does not escape SQL LIKE metacharacters % (match any sequence) and _ (match any single character). An unauthenticated attacker can inject these wildcards into search queries, causing them to match unintended records — including content that was not meant to be surfaced — resulting in information disclosure. This issue has been patched in version 4.1.1.

Frequently asked questions

What is CVE-2026-34973?: phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages() method in phpmyfaq/src/phpMyFAQ/Search.php uses real_escape_string() (via escape()) to sanitize the search term before embedding it in LIKE clauses. However, real_escape_string() does not escape SQL LIKE metacharacters % (match any sequence) and _ (match any single character). An unauthenticated attacker can inject these wildcards into search queries, causing them to match unintended records — including content that was not meant to be surfaced — resulting in information disclosure. This issue has been patched in version 4.1.1.
How severe is CVE-2026-34973?: CVE-2026-34973 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2026-34973 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-34973?: CVE-2026-34973 affects Phpmyfaq. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-34973?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2026-34973 have an EU (EUVD) identifier?: Yes. CVE-2026-34973 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-18330.
When was CVE-2026-34973 published?: CVE-2026-34973 was published on 2026-04-02 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:phpmyfaq:phpmyfaq:4.1.0:*:*:*:*:*:*:*

More vulnerabilities in Phpmyfaq

CVE-2023-5865 — Critical (CVSS 9.8): Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.
CVE-2023-5227 — Critical (CVSS 9.8): Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVE-2023-4006 — Critical (CVSS 9.8): Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.
CVE-2023-2429 — Critical (CVSS 9.8): Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
CVE-2023-0311 — Critical (CVSS 9.8): Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0307 — Critical (CVSS 9.8): Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

All CVEs affecting Phpmyfaq →

Other CWE-943 vulnerabilities

CVE-2026-40141 — Critical (CVSS 9.9): A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote…
CVE-2024-4872 — Critical (CVSS 9.9): A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an…
CVE-2026-41274 — Critical (CVSS 9.8): Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the…
CVE-2026-40351 — Critical (CVSS 9.8): FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses…
CVE-2026-32248 — Critical (CVSS 9.8): Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to…
CVE-2026-29793 — Critical (CVSS 9.8): Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0…

Browse all CWE-943 vulnerabilities →