These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-57996 is a high-severity privilege escalation vulnerability in phpMyFAQ before version 4.1.5. A delegated administrator with USER_ADD/EDIT/DELETE permissions can create a SuperAdmin account via the user/add API endpoint, potentially leading to full instance takeover. The vulnerability exists due to inadequate validation of user input, allowing an attacker to bypass normal access controls. This is [truncated]
CVE-2026-57994 is a vulnerability in phpMyFAQ that allows unauthenticated attackers to retrieve inactive FAQ content through its public FAQ API endpoints. Specifically, the vulnerability applies inconsistent active=yes and publication-date filtering across its public FAQ API endpoints, allowing attackers to retrieve inactive (draft or review-only) FAQ content. This vulnerability affects phpMyFAQ versions [truncated]
A path traversal vulnerability exists in phpMyFAQ before 4.1.5. The vulnerability is located in the concatenatePaths() function within src/phpMyFAQ/Export/Pdf/Wrapper.php. A user with FAQ editing privileges can store HTML containing crafted image paths that are processed during PDF generation. The path resolution logic locates the substring 'content' within a user-controlled path using strpos(); when 'con [truncated]
CVE-2026-56396 is a high-severity vulnerability in phpMyFAQ, a popular open-source FAQ management system. The vulnerability has a CVSS score of 8.7 and allows authenticated administrators to escalate privileges due to missing authorization in the editUser() and updateUserRights() endpoints. Non-SuperAdmin users with edit_user permission can set the is_superadmin flag or grant arbitrary rights to escalate [truncated]