Authorization Bypass in phpMyFAQ by phpMyFAQ Team

CVE-2026-46362

What is CVE-2026-46362?

phpMyFAQ prior to version 4.1.2 is susceptible to an authorization bypass vulnerability due to a flaw in the permission checking method. This vulnerability allows attackers, who have authenticated themselves, to access restricted admin pages without the appropriate permissions. As a result, sensitive information such as admin logs, user data, system information, and application configuration can be compromised. The vulnerability arises because execution does not terminate after a forbidden response is issued, leading to significant security risks.

References