Skip to content
phpMyFAQ Vulnerabilities Allow Unauthorized Access and Deletion of Privileged Groups

phpMyFAQ Vulnerabilities Allow Unauthorized Access and Deletion of Privileged Groups

First seen 19 Oct 2026, 09:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 09:48 UTC
  • •CVE-2026-111885 allows unauthorized deletion of privileged groups by lower-level admins.
  • •CVE-2026-111889 exposes sensitive admin data to any authenticated user.
  • •Both vulnerabilities affect phpMyFAQ versions 4.1 and 4.2, with potential impact on corporate environments.

Two vulnerabilities in phpMyFAQ, identified as CVE-2026-111885 and CVE-2026-111889, were disclosed on October 17, 2026. CVE-2026-111885 allows authenticated administrators to delete higher-privileged groups without proper authorization checks, while CVE-2026-111889 enables any authenticated user to access sensitive administrative data. The affected versions include 4.2.0-alpha and earlier, and 4.1.0 through 4.1.8. The vulnerabilities pose a significant risk to organizations using phpMyFAQ for internal knowledge management, particularly in sectors like technology and finance. The National Vulnerability Database has assigned a medium severity rating to both vulnerabilities. Exploitation requires prior authentication, limiting the threat to internal actors or compromised accounts. Immediate action is recommended to mitigate risks associated with these flaws.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-17
CVE-2026-111885 published
A vulnerability in phpMyFAQ allows unauthorized deletion of privileged groups by lower-level admins.
Ciberseguridadlatam
2026-10-17
CVE-2026-111889 published
A vulnerability allows any authenticated user to access sensitive admin data in phpMyFAQ.
Ciberseguridadlatam

More articles in this cluster (2)

Following this threat?

Track CVE-2026-111885 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

Which versions of phpMyFAQ are affected?
The vulnerabilities affect phpMyFAQ versions 4.1.0 to 4.1.8 and 4.2.0-alpha.
What should organizations do to protect themselves?
Organizations should apply patches as soon as they are available and review user permissions to limit access.
Is there evidence of active exploitation?
No evidence of active exploitation has been reported for these vulnerabilities at this time.