Authorization Bypass Vulnerability in phpMyFAQ by phpMyFAQ
CVE-2026-111902

6.9MEDIUM

Key Information:

Vendor

Thorsten

Status
pHPMyFAQ
Vendor
CVE Published:
17 October 2026

What is CVE-2026-111902?

The version of phpMyFAQ prior to 4.2.0-beta contains a vulnerability that enables unauthorized access to unpublished FAQs. Specifically, the 'isFaqAccessibleForUser()' function incorrectly allows unauthenticated users to view certain FAQs when an FAQ translation is missing. Attackers can exploit this flaw by sending a modified Accept-Language header to the comments and attachments API endpoints, potentially exposing sensitive comments and attachment listings that should remain protected.

Affected Version(s)

phpMyFAQ 4.2.0-alpha < 4.2.0-beta

phpMyFAQ 4.2.0-beta

References

https://github.com/thorsten/phpMyFAQ/security/advisories/...
vendor-advisory
https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

santhreal
.