CVE-2026-76214 | thorsten phpMyFAQ up to 4.1.6 WebAuthn prepareForLogin authentication replay

August 19, 2026 Yanac

A vulnerability has been found in thorsten phpMyFAQ up to 4.1.6 and classified as critical. The impacted element is the function prepareForLogin of the component WebAuthn. Performing a manipulation results in authentication bypass by capture-replay.

This vulnerability is identified as CVE-2026-76214. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More