CVE-2026-111891 | thorsten phpMyFAQ up to 4.2.0-alpha.2 Group Permission API updatePermissions privileges management

October 17, 2026 Yanac

A vulnerability was found in thorsten phpMyFAQ up to 4.2.0-alpha.2. It has been rated as problematic. Affected by this issue is the function updatePermissions of the component Group Permission API. The manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-111891. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More