CVE-2026-111906 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha Elasticsearch/OpenSearch Administration API cross-site request forgery

October 17, 2026 Yanac

A vulnerability classified as problematic was found in thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha. Impacted is an unknown function of the component Elasticsearch/OpenSearch Administration API. Executing a manipulation can lead to cross-site request forgery.

The identification of this vulnerability is CVE-2026-111906. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More