CVE-2026-85591

The record

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with session access can submit a PUT request to the user data update endpoint with only a CSRF token to silently change any user's password, including administrators, causing irreversible account takeover and victim lockout.

Affected packages

Related vulnerabilities

• CVE-2026-97380 MariaDB server is a community developed fork of MySQL server. CWE-620
• CVE-2026-73292 Semaphore UI is a web interface for managing DevOps tools. CWE-620
• CVE-2026-54801 A vulnerability has been identified in CPCI85 Central Processing/Communication (All… CWE-620
• CVE-2026-44733 OpenProject is open-source, web-based project management software. CWE-620
• CVE-2025-71328 Flowise before 3.0.10 contains an unverified password change vulnerability. CWE-620
• CVE-2025-71337 Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email… CWE-620
• CVE-2026-5386 The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated… CWE-620
• CVE-2026-8327 Concrete CMS below 9.5.0 and below is vulnerable to password change without… CWE-620