CVE-2026-111888
Last modified
CVE-2026-111888 is a low-severity vulnerability rated 2.7/10 on the CVSS scale. phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWS_DELETE instead of NEWS_EDIT. Attackers holding addnews and delnews can read the update-news CSRF token from their own cookie and rewrite any news item's header, body, author, link and active flag shown on the public front page..
Description
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWS_DELETE instead of NEWS_EDIT. Attackers holding addnews and delnews can read the update-news CSRF token from their own cookie and rewrite any news item's header, body, author, link and active flag shown on the public front page.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-111888?
How severe is CVE-2026-111888?
How do I fix CVE-2026-111888?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-111881FreeRDP from 3.14.1 before 3.32.0 contains an integer underf…7.6
- CVE-2026-111882phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2…8.1
- CVE-2026-111884phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does…8.3
- CVE-2026-111885phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missi…5.5
- CVE-2026-111886phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-fo…6.5
- CVE-2026-111887phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta cont…5.3
- CVE-2026-111889phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.…4.3
- CVE-2026-11189Insufficient validation of untrusted input in DevTools in Go…6.5
- CVE-2026-111890phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a pri…5.5
- CVE-2026-111891phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a pri…5.5
- CVE-2026-111892phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate …6.5
- CVE-2026-111893phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege …6.5
Are you affected by CVE-2026-111888?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST