CVE-2026-57996 - phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint
CVE ID :CVE-2026-57996 Published : July 15, 2026, 12:18 p.m. | 16 minutes ago Description :phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in the user/add API endpoint that allows non-SuperAdmin administrators to create SuperAdmin accounts. A delegated administrator with...