CVE-2026-49205
2 advisories.
Packagist/thorsten/phpmyfaq CVE-2026-49205: medium 6.5
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
Action: Upgrade thorsten/phpmyfaq to 4.1.4 or later.
composer require thorsten/phpmyfaq:4.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.4 | - |
Fixed versions
| 4.1.4 |
Sources
- osv: GHSA-8c6h-7g6x-m5x4
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8c6h-7g6x-m5x4
- https://nvd.nist.gov/vuln/detail/CVE-2026-49205
- https://github.com/thorsten/phpMyFAQ/commit/d5c195b1ecf5dc30fb825d7eb50d22481c24cb07
- https://github.com/thorsten/phpMyFAQ
CVE-2026-49205 · published · modified · JSON
Packagist/phpmyfaq/phpmyfaq CVE-2026-49205: medium 6.5
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
Action: Upgrade phpmyfaq/phpmyfaq to 4.1.4 or later.
composer require phpmyfaq/phpmyfaq:4.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.4 | - |
Fixed versions
| 4.1.4 |
Sources
- osv: GHSA-8c6h-7g6x-m5x4#Packagist/phpmyfaq/phpmyfaq
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8c6h-7g6x-m5x4
- https://nvd.nist.gov/vuln/detail/CVE-2026-49205
- https://github.com/thorsten/phpMyFAQ/commit/d5c195b1ecf5dc30fb825d7eb50d22481c24cb07
- https://github.com/thorsten/phpMyFAQ
CVE-2026-49205 · published · modified · JSON