Sultan0f1
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2026-126471No exploit | OpenEMR before 8.5.0 Missing Authorization via print_referral.php and trend_form.phpopenemr · openemr · CWE-862 | High7.1 | — | — | Today |
28Monitor | CVE-2026-111909No exploit | phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser APIthorsten · phpmyfaq · CWE-269 | High7.2 | — | 0.2% | Oct 17, 2026 |
34Monitor | CVE-2026-111908No exploit | phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST APIthorsten · phpmyfaq · CWE-639 | High8.7 | — | 0.3% | Oct 17, 2026 |
28Monitor | CVE-2026-111907No exploit | phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-databasethorsten · phpmyfaq · CWE-352 | High7.1 | — | 0.1% | Oct 17, 2026 |
28Monitor | CVE-2026-111906No exploit | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operationsthorsten · phpmyfaq · CWE-352 | High7.1 | — | 0.1% | Oct 17, 2026 |
- CVE-2026-12647128Monitor
OpenEMR before 8.5.0 Missing Authorization via print_referral.php and trend_form.php
HighCVSS 7.1No exploitopenemr · openemrToday
- CVE-2026-11190928Monitor
phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API
HighCVSS 7.2No exploitEPSS 0%thorsten · phpmyfaqOct 17, 2026
- CVE-2026-11190834Monitor
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API
HighCVSS 8.7No exploitEPSS 0%thorsten · phpmyfaqOct 17, 2026
- CVE-2026-11190728Monitor
phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database
HighCVSS 7.1No exploitEPSS 0%thorsten · phpmyfaqOct 17, 2026
- CVE-2026-11190628Monitor
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations
HighCVSS 7.1No exploitEPSS 0%thorsten · phpmyfaqOct 17, 2026