CVE-2026-111905 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha {userId} userId resource injection

October 17, 2026 Yanac

A vulnerability categorized as problematic has been discovered in thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha. Affected is an unknown function of the file /admin/api/user/data/{userId}. Executing a manipulation of the argument userId can lead to improper control of resource identifiers.

This vulnerability appears as CVE-2026-111905. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More