CVE-2026-3946General

LOWCVSS 2.0 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument askcontent results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-03-15)
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-11	1	General1
2026-03-15	2	Disclosure1General1

Full discourse3 posts

Infoflowcloud@infoflowcloud208d
Disclosure
🚨*CVE* CVE-2026-3946 A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument a… https://www.cve.org/CVERecord?id=CVE-2026-3946 ----- Traducción: CVE-2026-3946 Se … http://infoflow.cloud`
Post summary
Vulnerability CVE‑2026‑3946 was identified in PHPEMS 11.0 with an unknown function in /index.php; basic technical details are given but no PoC, exploit, patch, or active exploitation claim is present.
0000035
57 followersView on X
CVE@CVEnew208d
General
CVE-2026-3946 A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument a… https://www.cve.org/CVERecord?id=CVE-2026-3946
Post summary
The text references CVE‑2026‑3946 in PHPEMS 11.0, noting a vulnerability tied to an unknown function, but offers no detailed technical information, PoC, exploit, or patch information.
00000333
56.7K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash211d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3946 - PHPEMS index.php cross site scripting Intel Report: https://ift.tt/BDlgmvx
Post summary
The alert identifies CVE-2026-3946 as a cross‑site scripting issue in PHPEMS index.php but does not provide PoC, exploit, patch, or active exploitation details.
0000027
343 followersView on X

Explore more

Back to dashboard