CVE-2026-111911

CRITICAL

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account without authentication or challenge validation. Attackers can stage a victim username, submit a forged fmt=none attestation to register a passkey, then log in bypassing passwords and TOTP for account takeover.

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 10/17/2026Modified: 10/19/2026

Related Intelligence (1)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-111911 — phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability wher...

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account without authentication or challenge validation. Attackers can stage a victim username, submit a forged fmt=none attestation to register a passkey, then log in bypassing passwords and TOTP for account takeover.

CVE-2026-111911
NIST NVD

References (4)

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-g6cq-6rqg-6c9phttps://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-rg9h-f29v-xhxrhttps://www.vulncheck.com/advisories/phpmyfaq-4.0.0-before-4.1.9-authentication-bypass-via-webauthn-credential-injectionhttps://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-g6cq-6rqg-6c9p