CVE-2026-111910 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha Attachment attachment.php improper authorization

October 17, 2026 Yanac

A vulnerability marked as problematic has been reported in thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha. This affects an unknown part of the file attachment.php of the component Attachment. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-111910. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More