CVE-2026-111910

The phpMyFAQ application, specifically versions before 4.1.9 and 4.2.0-alpha before 4.2.0-beta , contains an authorization bypass vulnerability in the attachment.php component. The root cause is a failure to perform per-record permission checks, allowing attackers to bypass restrictions and downl...