[HIGH] phpMyFAQ's two-factor authentication login bypasses the password factor

PKSA-p9tj-4psw-jkcc CVE-2026-56737 GHSA-8gpw-xvpf-hvx5

Affected package: thorsten/phpmyfaq

Affected version: >=3.2.0,<4.1.6

Reported by:
GitHub