CVE-2026-56396

HIGH

phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()

Title source: cna

Description

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to SuperAdmin access.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

GHSA Advisory GHSA-985r-q3qp-299h

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-985r-q3qp-299h

Third Party Advisory third-party-advisory

VulnCheck Advisory: phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()

https://www.vulncheck.com/advisories/phpmyfaq-privilege-escalation-via-missing-authorization-in-edituser-and-updateuserrights

Scores

CVSS v3 8.8

EPSS 0.0044

EPSS Percentile 36.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-862

Status published

Products (2)

phpMyFAQ/phpMyFAQ < 4.1.4

phpMyFAQ/phpMyFAQ 4.1.4

Published Jun 21, 2026

Tracked Since Jun 21, 2026