https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:21:12.382007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08480 bdu:2026-08480 2026-10-03T15:21:12.443194+00:00 bdu:2026-08480 https://cve.radiocsirt.org/vuln/euvd-2026-329238 EUVD-2026-329238 2026-10-03T15:21:12.443275+00:00 EUVD-2026-329238 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56396 fkie_cve-2026-56396 2026-10-03T15:21:12.443290+00:00

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to SuperAdmin access.

 https://cve.radiocsirt.org/vuln/ghsa-q82q-6rfm-h9vp GHSA-q82q-6rfm-h9vp 2026-10-03T15:21:12.443320+00:00

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to SuperAdmin access.