Packagist/phpmyfaq/phpmyfaq CVE-2026-24421: medium 6.5, EPSS 1.74%

phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)

Action: Upgrade phpmyfaq/phpmyfaq to 4.0.17 or later.

composer require phpmyfaq/phpmyfaq:4.0.17

Affected

Fixed versions

Sources

• osv: GHSA-wm8h-26fv-mg7g
• https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-wm8h-26fv-mg7g
• https://nvd.nist.gov/vuln/detail/CVE-2026-24421
• https://github.com/thorsten/phpMyFAQ

CVE-2026-24421 · published 2026-01-23T20:17:25Z · modified 2026-02-03T03:07:09.717553Z · JSON