tocsin

CVE-2026-24421

2 advisories.

Packagist/phpmyfaq/phpmyfaq CVE-2026-24421: medium 6.5

phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)

Action: Upgrade phpmyfaq/phpmyfaq to 4.0.17 or later.

composer require phpmyfaq/phpmyfaq:4.0.17

Affected

introducedfixedlast affected
04.0.17-

Fixed versions

4.0.17

Sources

CVE-2026-24421 · published · modified · JSON

Packagist/thorsten/phpmyfaq CVE-2026-24421: medium 6.5

phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)

Action: Upgrade thorsten/phpmyfaq to 4.0.17 or later.

composer require thorsten/phpmyfaq:4.0.17

Affected

introducedfixedlast affected
04.0.17-

Fixed versions

4.0.17

Sources

CVE-2026-24421 · published · modified · JSON