CVE-2026-124433Medium· 6.5▾ SunlitphpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrators holding only GROUP_DELETE permission to delete higher-privileged groups. Attackers can submit a target group_list_select val…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
phpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrators holding only GROUP_DELETE permission to delete higher-privileged groups. Attackers can submit a target group_list_select value to /admin/group/confirm and then /admin/group/delete to remove privileged groups, their memberships, and permission mappings.
phpMyFAQ < 4.1.11Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-45009Medium· 4.3phpMyFAQ - Insufficient Authorization Check in Admin API Endpoints
CVE-2026-46362Medium· 6.5phpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Check
CVE-2026-46366High· 7.5phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypass
CVE-2026-111888Low· 2.7phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
CVE-2026-111900Medium· 4.3phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.php
CVE-2026-35671High· 8.8phpMyFAQ - Insecure Direct Object Reference in User Password API