CVE-2026-111897
Deferred Deferred - Pending Action

Authorization Bypass in phpMyFAQ Allows Unauthorized File Manipulation

Publication date: 2026-10-17

Last updated on: 2026-10-17

Assigner: VulnCheck

Description
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside their categories by supplying arbitrary record IDs. Attackers in medium permission mode can send upload or delete requests with a target record_id or attachment ID to tamper with or remove files on unauthorized FAQs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-17
Last Modified
2026-10-17
Generated
2026-10-17
AI Q&A
2026-10-17
EPSS Evaluated
N/A
NVD
CVE-2026-111897
EUVD
EUVD-2026-103322

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
thorsten phpMyFAQ 4.2.0-alpha

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

phpMyFAQ 4.2.0-alpha before 4.2.0-beta has an authorization bypass flaw (CWE-862) allowing category-restricted editors to manage attachments for FAQs outside their categories by supplying arbitrary record IDs. Attackers with medium permissions can upload or delete files by manipulating record or attachment IDs, potentially tampering with unauthorized content.

Detection Guidance

To detect this vulnerability, monitor for unauthorized file uploads or deletions in phpMyFAQ. Check server logs for suspicious requests to attachment administration endpoints with manipulated record_id or record_lang parameters. Look for medium-privileged users performing actions outside their assigned categories.

Impact Analysis

This vulnerability allows attackers with medium permissions to tamper with or delete files on unauthorized FAQs, leading to unauthorized content changes, data loss, and partial service disruption. Attackers can upload malicious files or remove existing ones, affecting data integrity and availability.

Compliance Impact

This vulnerability could lead to unauthorized data modification or deletion, violating integrity and confidentiality requirements in GDPR and HIPAA. Non-compliance risks include fines, legal penalties, and reputational damage due to compromised data integrity and potential exposure of sensitive information.

Mitigation Strategies

Immediately upgrade phpMyFAQ to version 4.2.0-beta or later. Review and restrict permissions for category-restricted editors. Implement strict input validation for record_id and record_lang parameters in attachment endpoints. Monitor for unauthorized file changes and revoke suspicious access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111897. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart