Vulnerability · Published Aug 19, 2026 · Assigned by VulnCheck

CVE-2026-76208phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP

High 8.2

In plain English

A high-severity security flaw in phpMyFAQ from thorsten. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.4%top 61.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authentication is enabled, after a successful LDAP bind the code calls User::setStatus('active') unconditionally, which overwrites the account_status column of a pre-existing local account from 'blocked' to 'active'. As a result, a user whose local phpMyFAQ account has been administratively blocked can restore their account and log in by authenticating via LDAP. The state transition is not logged, so administrators cannot detect that the block was overridden. Fixed in 4.1.7.

Affected products (as reported)

Vendor	Product	Versions
thorsten	phpMyFAQ	3.1.0 – through 4.1.6

Weakness: CWE-778 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

References

GitHub Security Advisory (GHSA-8pr3-q3cw-q234) vendor-advisory
VulnCheck Advisory: phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP third-party-advisory