CVE-2026-116182: phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching

Severity: medium (CVSS 5.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-25 · updated 2026-10-29
Weakness: CWE-918

Description

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can influence FAQ content can embed image URLs pointing to loopback or internal services, causing the server to request them and embed responses in generated PDFs.

Affected products

thorsten phpMyFAQ: before 4.1.10 — fixed in 4.1.10

How to fix

Upgrade to a fixed version: thorsten phpMyFAQ 4.1.10. Check the vendor advisory for mitigations.

References

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8wmv-9c4g-p5mg
https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.10-ssrf-via-pdf-export-image-fetching
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8wmv-9c4g-p5mg

Get alerted when CVE-2026-116182 or the next vulnerability affects your stack