Packagist/phpmyfaq/phpmyfaq CVE-2026-57995: high 8.8, EPSS 0.44%
phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold
Action: Upgrade phpmyfaq/phpmyfaq to 4.1.5 or later.
composer require phpmyfaq/phpmyfaq:4.1.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.5 | - |
Fixed versions
| 4.1.5 |
Sources
- osv: GHSA-pg62-f8g4-4wqh
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pg62-f8g4-4wqh
- https://github.com/thorsten/phpMyFAQ/commit/de5016607dd606ef161cccd10fa5deec303c834e
- https://github.com/thorsten/phpMyFAQ
CVE-2026-57995 · published · modified · JSON