CVE-2026-35675 Details

An authentication bypass vulnerability has been identified in phpMyFAQ versions prior to 4.1.3. This vulnerability exists in the password reset endpoint, allowing unauthenticated attackers to reset any user account password without the need for token verification or email confirmation. Exploitation of this vulnerability enables attackers to take over user accounts, including those with administrative privileges. The issue arises from the absence of a verification token, lack of rate limiting on the endpoint, and the failure to send a confirmation email before resetting passwords. As a result, attackers can enumerate valid usernames, receive plaintext passwords via email, and gain full access to user accounts, including SuperAdmin accounts.

Users are advised to update phpMyFAQ to version 4.1.3 or later, where this vulnerability has been patched.