CVE-2026-75919 | thorsten phpMyFAQ up to 4.1.6 update-database SetupController improper authentication

A vulnerability was found in thorsten phpMyFAQ up to 4.1.6. It has been rated as critical. Impacted is the function SetupController of the file /api/setup/update-database. Performing a manipulation results in improper authentication.

This vulnerability is reported as CVE-2026-75919. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More