CVE-2026-111893 | Thorsten phpMyFAQ 4.2.0-alpha GroupController category-restrictions saveCategoryRestrictions categoryIds privileges management

October 17, 2026 Yanac

A vulnerability was found in Thorsten phpMyFAQ 4.2.0-alpha and classified as problematic. This vulnerability affects the function GroupController::saveCategoryRestrictions of the file /admin/api/group/category-restrictions of the component GroupController. Executing a manipulation of the argument categoryIds can lead to improper privilege management.

This vulnerability is registered as CVE-2026-111893. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More