CVE-2026-111897 | thorsten phpMyFAQ 4.2.0-alpha Attachment Management record_id/attachment_id authorization

October 17, 2026 Yanac

A vulnerability was found in thorsten phpMyFAQ 4.2.0-alpha. It has been classified as critical. This issue affects some unknown processing of the component Attachment Management. The manipulation of the argument record_id/attachment_id leads to authorization bypass.

This vulnerability is documented as CVE-2026-111897. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More