CVE-2026-111902 | thorsten phpMyFAQ 4.2.0-alpha FAQ Translation Check isFaqAccessibleForUser Accept-Language authorization

October 17, 2026 Yanac

A vulnerability was found in thorsten phpMyFAQ 4.2.0-alpha. It has been rated as problematic. This impacts the function isFaqAccessibleForUser of the component FAQ Translation Check. Performing a manipulation of the argument Accept-Language results in authorization bypass.

This vulnerability is reported as CVE-2026-111902. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More