What is GHSA-prvh-6vp9-668j?

GHSA-prvh-6vp9-668j is a security advisory published by GitHub Security Advisories with Medium severity. phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data...

Which CVE IDs does GHSA-prvh-6vp9-668j cover?

GHSA-prvh-6vp9-668j covers the following CVE IDs: CVE-2026-85588. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-prvh-6vp9-668jMedium

phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-85588 →

📋 Description

phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files. Attackers obtaining exported archives can extract the TOTP seed and generate valid one-time codes to bypass two-factor authentication.

🔗 References (4)

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-xhgx-2wj8-g4pj
https://nvd.nist.gov/vuln/detail/CVE-2026-85588
https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.8-totp-secret-exposure-via-data-export
https://github.com/advisories/GHSA-prvh-6vp9-668j