Authentication Bypass in phpMyFAQ by Thorsten Witzel

CVE-2026-111911

What is CVE-2026-111911?

An authentication bypass vulnerability exists in phpMyFAQ versions prior to 4.1.9, allowing attackers to exploit the WebAuthn registration endpoints. This flaw enables the injection of credentials into any user account without the necessary authentication or challenge verification. Consequently, an attacker can craft a victim's username and submit a malicious attestation to register an unauthorized passkey, leading to the possibility of account takeover without needing passwords or Time-based One-Time Passwords (TOTP). Users of phpMyFAQ are urged to upgrade to the latest version to mitigate this vulnerability.

References