Skip to content

CVE record · 1 source

CVE-2026-111882

CVSS 8.1

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated…

Vendor: Microsoft, Red Hat
Product: Active Directory / Entra ID, Keycloak / Single Sign-On, Java libraries / app servers, Open-source identity providers
CVSS: 8.1
EPSS: 0.004 (p33)
Exposure class: Identity, Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 14d ago

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated…

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip TOTP two-factor authentication through the Keycloak and Entra ID SSO…

CVSS 8.1 CVE-2026-111882 Microsoft Red Hat