{"schema":"vulnpedia.research/1","cve":"CVE-2026-108851","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/phpmyfaq-mcp-search-visibility","tags":["third-party-advisory","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/phpmyfaq-mcp-search-visibility"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-13T13:39:25.428Z","url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/phpmyfaq-mcp-search-visibility"},{"source":"nvd","sourceId":"CVE-2026-108851","modified":"2026-10-13T14:17:21.390","url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/phpmyfaq-mcp-search-visibility"}]},{"url":"https://github.com/thorsten/phpMyFAQ/blob/4.1.10/phpmyfaq/src/phpMyFAQ/Search.php#L137-L194","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","url":"https://github.com/thorsten/phpMyFAQ/blob/4.1.10/phpmyfaq/src/phpMyFAQ/Search.php#L137-L194"},{"source":"nvd","sourceId":"CVE-2026-108851","modified":"2026-10-13T14:17:21.390","url":"https://github.com/thorsten/phpMyFAQ/blob/4.1.10/phpmyfaq/src/phpMyFAQ/Search.php#L137-L194"}]},{"url":"https://github.com/thorsten/phpMyFAQ/blob/4.1.10/phpmyfaq/src/phpMyFAQ/Service/McpServer/FaqSearchToolExecutor.php#L56-L102","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","url":"https://github.com/thorsten/phpMyFAQ/blob/4.1.10/phpmyfaq/src/phpMyFAQ/Service/McpServer/FaqSearchToolExecutor.php#L56-L102"},{"source":"nvd","sourceId":"CVE-2026-108851","modified":"2026-10-13T14:17:21.390","url":"https://github.com/thorsten/phpMyFAQ/blob/4.1.10/phpmyfaq/src/phpMyFAQ/Service/McpServer/FaqSearchToolExecutor.php#L56-L102"}]},{"url":"https://github.com/thorsten/phpMyFAQ","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","url":"https://github.com/thorsten/phpMyFAQ"},{"source":"nvd","sourceId":"CVE-2026-108851","modified":"2026-10-13T14:17:21.390","url":"https://github.com/thorsten/phpMyFAQ"}]},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-through-4.1.10-missing-authorization-via-mcp-server-faq-search-tool","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T13:26:01.436Z","url":"https://www.vulncheck.com/advisories/phpmyfaq-through-4.1.10-missing-authorization-via-mcp-server-faq-search-tool"},{"source":"nvd","sourceId":"CVE-2026-108851","modified":"2026-10-13T14:17:21.390","url":"https://www.vulncheck.com/advisories/phpmyfaq-through-4.1.10-missing-authorization-via-mcp-server-faq-search-tool"}]},{"source":"euvd","sourceId":"EUVD-2026-97002","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97002","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-97002","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97002"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}