CVE-2026-111890

MEDIUM 5.5

phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUserRights that drops per-right language restrictions when rights are re-granted. Administrators holding USER_EDIT can submit language-scoped rights to the update-rights API, including for themselves, to gain unrestricted FAQ create, edit, and publish access across all languages.

CWE	CWE-269
Vendor	thorsten
Product	phpmyfaq
Published	Oct 17, 2026

Stay Ahead of the Next One

Get instant alerts for thorsten phpmyfaq

Be the first to know when new medium vulnerabilities affecting thorsten phpmyfaq are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

None

Affected Versions

thorsten / phpMyFAQ

4.2.0-alpha.2 < 4.2.0-beta

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-3666-fmjj-qm5h vulncheck.com: https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha.2-before-4.2.0-beta-privilege-escalation-via-updateuserrights

Credits

🔍 manus-pi 🔍 manus-use