Vulnerability Description
phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to change any user's password without authorization verification. An attacker with low-privilege admin credentials can escalate to SuperAdmin by modifying the userId parameter in the overwrite-password API request.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-xvp4-phqj-cjr3
- https://www.vulncheck.com/advisories/phpmyfaq-insecure-direct-object-reference-i
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-xvp4-phqj-cjr3
FAQ
What is CVE-2026-35671?
CVE-2026-35671 is a vulnerability with a CVSS score of 8.8 (HIGH). phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to change any user's password without ...
How severe is CVE-2026-35671?
CVE-2026-35671 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35671?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.