Skip to content
High-Risk Authorization Bypass in phpMyFAQ Disclosed

High-Risk Authorization Bypass in phpMyFAQ Disclosed

First seen 25 Oct 2026, 18:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 25, 2026 at 19:12 UTC
  • •CVE-2026-116183 allows unauthorized modification and deletion of questions in phpMyFAQ.
  • •The vulnerability affects versions prior to 4.1.10 and poses a high integrity risk.
  • •Immediate upgrade to the fixed version is recommended to mitigate the risk.

An object-level authorization bypass vulnerability, CVE-2026-116183, was disclosed in phpMyFAQ versions prior to 4.1.10. This flaw allows unauthenticated attackers to modify or delete visitor-submitted questions via the public API by supplying arbitrary identifiers. The vulnerability is particularly severe when the deletion feature is enabled, leading to potential data integrity issues and operational disruption. Attackers can exploit this flaw by solving a CAPTCHA, with no authentication or permission checks required. The risk is heightened for internet-accessible deployments that accept visitor questions. As of the publication date, there is no confirmed active exploitation, but the integrity risk is classified as high. Users are advised to upgrade to the fixed version immediately and restrict API access where possible.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-25
CVE-2026-116183 published
A high-priority vulnerability in phpMyFAQ was disclosed, allowing unauthorized question modifications and deletions.
Redpacketsecurity
2026-10-25
GitHub Security Advisory issued
GitHub published an advisory detailing the same vulnerability, confirming its existence and severity.
github.com

More articles in this cluster (3)

Following this threat?

Track CVE-2026-116183 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 3

Common questions

What versions of phpMyFAQ are affected?
Versions prior to 4.1.10 are vulnerable to this authorization bypass.
Is there confirmed exploitation of this vulnerability?
As of now, there is no confirmed active exploitation reported.
What should I do if I am using an affected version?
Upgrade to phpMyFAQ version 4.1.10 or later immediately to mitigate the risk.