CVE-2026-111900 | thorsten phpMyFAQ up to 4.1.8/4.1.x Attachment attachment.php id improper authorization

October 17, 2026 Yanac

A vulnerability was found in thorsten phpMyFAQ up to 4.1.8/4.1.x. It has been declared as problematic. This affects an unknown function of the file attachment.php of the component Attachment. Such manipulation of the argument ID leads to improper authorization.

This vulnerability is documented as CVE-2026-111900. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More