---
id: CVE-2026-116182
title: phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching
summary: >-
  phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in
  the PDF export feature that fetches external images referenced in FAQ answers.
  Attackers who can influence FAQ content can embed image URLs pointing to
  loopba…
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-918
vendor: thorsten
product: phpMyFAQ
affected:
  - phpMyFAQ < 4.1.10
published: '2026-10-25'
updated: '2026-10-25'
sourceUpdated: '2026-10-25T13:20:20.563Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116182'
references:
  - url: >-
      https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8wmv-9c4g-p5mg
    label: GitHub Security Advisory (GHSA-8wmv-9c4g-p5mg)
  - url: >-
      https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.10-ssrf-via-pdf-export-image-fetching
    label: >-
      VulnCheck Advisory: phpMyFAQ before 4.1.10 SSRF via PDF Export Image
      Fetching
tags:
  - cve.org
ingestedAt: '2026-10-25T22:08:29.945Z'
---

## Overview

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can influence FAQ content can embed image URLs pointing to loopback or internal services, causing the server to request them and embed responses in generated PDFs.

## Affected

- `phpMyFAQ < 4.1.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.