CVE-2026-111890 | Thorsten phpMyFAQ up to 4.2.0-alpha.2 UserController updateUserRights privileges management

October 17, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Thorsten phpMyFAQ. Affected by this vulnerability is the function UserController::updateUserRights of the component UserController. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-111890. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More