CVE-2026-85586: phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
phpMyFAQto a version that resolves this vulnerability.Fixed in 4.1.8 - Configuration
Do not submit question requests with the store parameter set to 'now', since phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when store='now'.
phpMyFAQ question submission store parameter = not 'now'
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated attacker able to send question-submission requests to an affected phpMyFAQ instance can exploit it. No CAPTCHA solution is required when the request uses the store parameter value 'now'.
What is the practical impact?
An attacker can submit unlimited questions, polluting the database and triggering outgoing mail notifications. This can create administrative overhead and mail-related disruption.
Which versions are affected?
phpMyFAQ versions before 4.1.8 are affected. Updating to 4.1.8 or later addresses the described CAPTCHA-validation failure.