Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-85591phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change

High 7.1

In plain English

A high-severity security flaw in phpMyFAQ from thorsten. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 4.0)7.1High

Exploit odds (30 days)0.5%top 55.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with session access can submit a PUT request to the user data update endpoint with only a CSRF token to silently change any user's password, including administrators, causing irreversible account takeover and victim lockout.

Affected products (as reported)

Vendor	Product	Versions
thorsten	phpMyFAQ	0 – before 4.1.8

Weakness: CWE-620 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

References

GitHub Security Advisory (GHSA-6r2c-694w-24qv) vendor-advisory
VulnCheck Advisory: phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change third-party-advisory