CVE-2026-56396

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 21, 2026

Last Seen

June 21, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in phpMyFAQ Allows Privilege Escalation74.0

A critical vulnerability, CVE-2026-56396, has been identified in phpMyFAQ versions prior to 4.1.4. This vulnerability allows authenticated non-SuperAdmin users with edit_user permissions to escalate their privileges to SuperAdmin by modifying the is_superadmin flag through the editUser() and updateU...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerability in phpMyFAQ Allows Privilege Escalation

Jun 21·3 sources

Related Articles (3)

CVE-2026-56396 AKAOMA CVE VULNERABILITIES / 7h phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to SuperAdmin access.

cve.akaoma.com·Jun 21

CVE-2026-56396: phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights() [HIGH] CVSS 8.8 Exploit Intelligence — Recent CVEs / 4h phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to Super

exploit-intel.com·Jun 21

CVE-2026-56396 - Exploits & Severity

Related Entities

Privilege Escalation CWE-269 - Improper Privilege Management CWE-862 - Missing Authorization T1068 - Exploitation for Privilege Escalation PhpMyFAQ