https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 09:27:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354849 EUVD-2026-354849 https://cve.radiocsirt.org/vuln/euvd-2026-354849 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66399 <p>phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding user-management rights and immediately inherit those permissions to modify or delete user accounts.</p> <p>phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding user-management rights and immediately inherit those permissions to modify or delete user accounts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66399 https://cve.radiocsirt.org/vuln/ghsa-5w7v-f8fx-865c <p>phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding user-management rights and immediately inherit those permissions to modify or delete user accounts.</p> <p>phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding user-management rights and immediately inherit those permissions to modify or delete user accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-5w7v-f8fx-865c