CVE-2026-111901
high
CVSS 7.5
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption...
Résumé
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the server.
Source: NIST National Vulnerability Database NVD GitHub Advisory
Références
- web github.com
- web vulncheck.com
- web nvd.nist.gov
- web github.com