Product
phpMyFAQ Privilege Escalation via User Add API Endpoint (CVE-2026-57996)
1 TTP 1 CVEA privilege escalation vulnerability (CVE-2026-57996) exists in phpMyFAQ before version 4.1.5, allowing a delegated administrator with specific permissions to create a SuperAdmin account through the `/admin/api/user/add` API endpoint, leading to full instance takeover.
phpMyFAQ Unauthenticated Password Reset Vulnerability (CVE-2026-35676)
2 rules 1 TTP 1 CVEphpMyFAQ before 4.1.3 is vulnerable to an unauthenticated password reset, allowing attackers to change account passwords without token validation by sending crafted PUT requests to the /api/index.php/user/password/update endpoint.
phpMyFAQ SQL Injection Vulnerability in CurrentUser::setTokenData (CVE-2026-46359)
2 rules 1 TTP 1 CVEphpMyFAQ before version 4.1.2 contains a SQL injection vulnerability in CurrentUser::setTokenData, allowing authenticated attackers with crafted Azure AD accounts to execute arbitrary SQL queries by injecting malicious OAuth token claims.
phpMyFAQ Unauthenticated SQL Injection via User-Agent Header
2 rules 1 TTPUnauthenticated SQL injection vulnerability exists in phpMyFAQ <= 4.1.1 due to improper handling of the User-Agent header in BuiltinCaptcha, allowing attackers to inject malicious SQL payloads and potentially gain complete control of the datastore.