The vulnerability of the removeTwofactorConfig() function in the phpMyFAQ web application, which allows a hacker to bypass existing security measures

The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Use of Single-factor Authentication

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Use of Single-factor Authentication through the removeTwofactorConfig process and the twofactorenabled form field, which are accessible via POST...

CVE-2026-85590: Use of Single-factor Authentication

phpMyFAQ before 4.1.8 contains an authentication bypass vulnerability in its two-factor authentication TOTP disable functionality. The removeTwofactorConfig handler reachable via POST /api/user/remove-twofactor verifies only that the user is logged in and that a valid CSRF token is supplied, then...