{"id":"CVE-2026-111895","summary":"phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_username","details":"phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred_username claim and whose AuthEntraId::create() ignores the duplicate-login exception while continuing with the existing local account. Attackers controlling an Entra identity in the configured tenant with a matching preferred_username can take over that local account, including super-admin accounts.","aliases":["GHSA-6hhv-gc4g-f4r7"],"modified":"2026-10-20T02:30:43.686947710Z","published":"2026-10-17T18:46:18.581Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-287"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111895.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111895.json"},{"type":"ADVISORY","url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6hhv-gc4g-f4r7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111895"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/phpmyfaq-3.2.0-before-4.0.0-and-4.0.2-before-4.2.0-beta-account-takeover-via-entra-id-preferred-username"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/thorsten/phpmyfaq","events":[{"introduced":"860c494b287d217c4b9b74856834ab5050cc8a39"},{"fixed":"9bf3d792e67da3c04217002a9642fdf74ced9554"},{"introduced":"be08db5cd80763e3466e17b8e616d662ae3c1054"},{"fixed":"e137c1e017b15ffa01181a2380b81e1aea5ae1ad"}],"database_specific":{"extracted_events":[{"introduced":"3.2.0"},{"fixed":"4.0.0"},{"introduced":"4.0.2"},{"fixed":"4.2.0-beta"}],"source":"AFFECTED_FIELD"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111895.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}]}