https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 12:17:47 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-111909 <p>phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission to delete superadmin accounts. Attackers can send a DELETE request to /admin/api/user/delete with a superadmin&#39;s userId other than 1, removing administrative access and accountability.</p> <p>phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission to delete superadmin accounts. Attackers can send a DELETE request to /admin/api/user/delete with a superadmin&#39;s userId other than 1, removing administrative access and accountability.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111909 https://db.gcve.eu/vuln/ghsa-2jrh-wx9p-9fp9 <p>phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission to delete superadmin accounts. Attackers can send a DELETE request to /admin/api/user/delete with a superadmin&#39;s userId other than 1, removing administrative access and accountability.</p> <p>phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission to delete superadmin accounts. Attackers can send a DELETE request to /admin/api/user/delete with a superadmin&#39;s userId other than 1, removing administrative access and accountability.</p> https://db.gcve.eu/vuln/ghsa-2jrh-wx9p-9fp9