CVE-2026-111888

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-111888
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111888.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-111888
Aliases
  • GHSA-287v-6c6j-x9f7
Published
2026-10-17T18:46:13Z
Modified
2026-10-28T02:30:47Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
Details

phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWS_DELETE instead of NEWS_EDIT. Attackers holding addnews and delnews can read the update-news CSRF token from their own cookie and rewrite any news item's header, body, author, link and active flag shown on the public front page.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111888.json"
}
References

Affected packages

Git / github.com/thorsten/phpmyfaq

Affected ranges

Type
GIT
Repo
https://github.com/thorsten/phpmyfaq
Events
Introduced
9bf3d792e67da3c04217002a9642fdf74ced9554
Fixed
ecd0de3cff20d4a06e8ad17eef7c22ef227f0af9
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "fixed": "4.1.9"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "fixed": "4.1.9"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111888.json"