CVE-2026-111908

CVSS

8.3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 10
   CVE NVD 14d ago

   phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT…

   phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update endpoint, which checks only the global edit_faq permission and does not…

   CVSS 8.3 CVE-2026-111908