CVE-2026-66399: Improper Privilege Management in thorsten phpMyFAQ
phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding user-management rights and immediately inherit those permissions to modify or delete user accounts.
AI Analysis
Technical Summary
CVE-2026-66399 is a privilege escalation vulnerability affecting phpMyFAQ before version 4.1.6. The issue exists in the GroupController::updateMembers() method, where administrators with limited group-management permissions can bypass verification checks and add themselves to groups with higher privileges, such as those with user-management rights. This improper privilege management enables unauthorized modification or deletion of user accounts by attackers who escalate their privileges through this flaw.
Potential Impact
An attacker with group-management permissions can escalate their privileges to user-management level, allowing them to modify or delete user accounts. This can lead to unauthorized account control and potential disruption of user management within the phpMyFAQ system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is indicated, users should monitor vendor communications for updates and consider restricting group-management permissions until a fix is available.
CVE-2026-66399: Improper Privilege Management in thorsten phpMyFAQ
Description
phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding user-management rights and immediately inherit those permissions to modify or delete user accounts.
CVSS v4.0
Score 8.5high
Affected software
thorsten
phpMyFAQ
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-66399 is a privilege escalation vulnerability affecting phpMyFAQ before version 4.1.6. The issue exists in the GroupController::updateMembers() method, where administrators with limited group-management permissions can bypass verification checks and add themselves to groups with higher privileges, such as those with user-management rights. This improper privilege management enables unauthorized modification or deletion of user accounts by attackers who escalate their privileges through this flaw.
Potential Impact
An attacker with group-management permissions can escalate their privileges to user-management level, allowing them to modify or delete user accounts. This can lead to unauthorized account control and potential disruption of user management within the phpMyFAQ system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is indicated, users should monitor vendor communications for updates and consider restricting group-management permissions until a fix is available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-07-26T12:22:34.139Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a6786039c2644c7f861a52b
Added to database: 07/27/2026, 16:23:31 UTC
Last enriched: 07/29/2026, 23:50:05 UTC
Last updated: 09/10/2026, 20:02:50 UTC
Views: 96
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.