CVE-2026-116183
Deferred Deferred - Pending Action

phpMyFAQ Object-Level Authorization Bypass Vulnerability

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers to modify or delete any visitor question by supplying an arbitrary openQuestionID to POST /api/faq/create. Attackers solving the CAPTCHA can rewrite question categories, forge answered entries in faqquestion_history, or permanently delete questions when records.enableDeleteQuestion is enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116183
EUVD
EUVD-2026-109444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
thorsten phpMyFAQ 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an authorization bypass vulnerability in phpMyFAQ versions before 4.1.10. It allows unauthenticated attackers to modify or delete any visitor-submitted question by providing a custom openQuestionID parameter to the POST /api/faq/create endpoint. Attackers can solve a CAPTCHA to manipulate question categories, forge answered entries in the faqquestion_history table, or permanently delete questions if the system has records.enableDeleteQuestion enabled.

Detection Guidance

Check phpMyFAQ API logs for POST requests to /api/faq/create with openQuestionID parameters. Look for unauthenticated requests or CAPTCHA solutions followed by unexpected modifications or deletions of visitor questions.

Impact Analysis

This vulnerability can lead to unauthorized modifications or deletion of visitor questions, compromising data integrity. Attackers could rewrite question categories, forge answered entries, or permanently remove questions, potentially disrupting the FAQ system's functionality and user trust.

Compliance Impact

This vulnerability could lead to unauthorized modifications or deletion of visitor questions, potentially violating data integrity and confidentiality requirements under GDPR and HIPAA. Unauthorized changes to stored data may constitute a breach of compliance if personal or sensitive information is involved.

Mitigation Strategies

Upgrade phpMyFAQ to version 4.1.10 or later. If upgrading is not possible, restrict access to the /api/faq/create endpoint and implement proper authorization checks for openQuestionID parameters.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116183. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart