CVE-2026-111891

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.2.0-alpha.2 through 4.2.0-beta

Description A privilege escalation issue exists in the group permission API. The 'updatePermissions' and 'updateMembers' endpoints fail to validate held rights against language or category scopes when writing group grants. This allows administrators with GROUP EDIT permissions, who are not superadmins, to grant a group rights they possess only within a limited scope and then join that group using the 'updateMembers' endpoint. Consequently, they can obtain unrestricted access to create, edit, and publish FAQs across all categories and languages.

Recommendations Update phpMyFAQ to version 4.2.0-beta or later.