CVE-2026-111882: Authentication Bypass in phpMyFAQ via Keycloak and Entra ID SSO Callbacks
A critical authentication bypass vulnerability (CVE-2026-111882) has been discovered in phpMyFAQ, affecting versions 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta. This vulnerability allows IdP-authenticated users to skip TOTP two-factor authentication through Keycloak and Entra ID SSO callbacks, potentially leading to fully authenticated sessions, including administrator accounts. The CVSS score for this vulnerability is 8.1, indicating a high severity. Organizations using affected versions of phpMyFAQ should immediately apply patches or upgrade to a fixed version.