CVE-2026-75920
Received Received - Intake

phpMyFAQ Backup ZIP File Exposure Leading to Credential Disclosure

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulnCheck

Description
phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-75920
EUVD
EUVD-2026-62445

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
phpmyfaq phpmyfaq to 4.1.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-377 Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in phpMyFAQ (CVE-2026-75920) involves the insecure creation of backup ZIP files. When a backup is triggered, a temporary file named content.zip is written to a web-accessible directory. This file contains sensitive data like database credentials. Normally, the file is deleted after use, but flaws in the process can leave it exposed, allowing attackers to download it.

Detection Guidance

Check for the presence of content.zip in the web-accessible document root directory of phpMyFAQ installations. Use commands like 'curl http://your-server/content.zip' to attempt downloading the file. Monitor for unexpected ZIP files in the content directory or unusual access patterns to /content.zip.

Impact Analysis

Unauthenticated attackers can exploit this to download sensitive files, including database credentials, by racing to access the temporary ZIP file before it is deleted. Attackers may also trick an admin into triggering a backup via XSS, then download the exposed archive.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Exposure of database credentials may result in compliance breaches, fines, or legal consequences due to compromised personal or health data.

Mitigation Strategies

Upgrade phpMyFAQ to version 4.1.7 or later immediately. If upgrading is not possible, restrict access to the content directory via server configuration (e.g., .htaccess rules) and disable the backup API endpoint if not needed. Regularly audit for exposed content.zip files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75920. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart