CVE-2026-57996 | phpMyFAQ up to 4.1.4 API endpoint /admin/api/user/add user_add isSuperAdmin permission

July 15, 2026 Yanac

A vulnerability identified as problematic has been detected in phpMyFAQ up to 4.1.4. Affected is the function user_add of the file /admin/api/user/add of the component API endpoint. This manipulation of the argument isSuperAdmin causes permission issues.

This vulnerability appears as CVE-2026-57996. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More