Broken Object Authorization (CWE-639) in phpMyFAQ API

CVE-2026-111908

Oct 17, 2026

Deferred

Category:

Broken Object-Level Authorization

CWE:

CWE-639

Impact:

Unauthorized modification of restricted FAQ content and publication state

Severity:

HIGH RISK

(8.3)

CVSS Version:

3.1

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Get Started

text

NDV

[GET STARTED]

Find out what's already

START PENTEST

NO CC REQUIRED

BOOK A DEMO

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

CodeAnt AI

355 Bryant St, San Francisco, CA 94107