CVE-2026-57995: phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions
phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GROUPEDIT administrators to grant arbitrary rights to groups without verifying they hold those rights themselves. A delegated administrator can exploit this by assigning high-value permissions to a group they belong to, inheriting those rights and escalating privileges up to full administrative control.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
phpMyFAQto a version that resolves this vulnerability.Fixed in 4.1.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57995?
CVE-2026-57995 has a high severity rating of 8.8.
How can I fix CVE-2026-57995?
To fix CVE-2026-57995, update phpMyFAQ to version 4.1.5 or later.
What type of vulnerability is CVE-2026-57995?
CVE-2026-57995 is a privilege escalation vulnerability.
Who is affected by CVE-2026-57995?
Administrators with GROUP_EDIT permissions in phpMyFAQ prior to version 4.1.5 are affected by CVE-2026-57995.
What can an attacker do with CVE-2026-57995?
An attacker can exploit CVE-2026-57995 to grant arbitrary rights to groups without verifying their own permissions.