https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T00:01:23.083599+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124433 fkie_cve-2026-124433 2026-11-12T00:01:23.084994+00:00

phpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrators holding only GROUP_DELETE permission to delete higher-privileged groups. Attackers can submit a target group_list_select value to /admin/group/confirm and then /admin/group/delete to remove privileged groups, their memberships, and permission mappings.

 https://db.gcve.eu/vuln/ghsa-6hrq-q673-6545 GHSA-6hrq-q673-6545 2026-11-12T00:01:23.085062+00:00

phpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrators holding only GROUP_DELETE permission to delete higher-privileged groups. Attackers can submit a target group_list_select value to /admin/group/confirm and then /admin/group/delete to remove privileged groups, their memberships, and permission mappings.