All vulnerabilities
CVE-2026-116183GHSA-9m55-g84r-x6v7

phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID

thorsten phpMyFAQ
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in4.1.10Fixed versionCVE List
Published25 Oct 2026Updated 25 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers to modify or delete any visitor question by supplying an arbitrary openQuestionID to POST /api/faq/create. Attackers solving the CAPTCHA can rewrite question categories, forge answered entries in faqquestion_history, or permanently delete questions when records.enableDeleteQuestion is enabled.

Text from CVE List

Affected versions 2

  • phpMyFAQaffected: all versions before 4.1.10CVE List
  • phpMyFAQunaffected: 4.1.10CVE List

References 2