High severity7.5NVD Advisory· Published Oct 17, 2026· Updated Oct 17, 2026
CVE-2026-111901
CVE-2026-111901
Description
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 4.2.0-alpha before 4.2.0-beta
Patches
Vulnerability mechanics
References
2News mentions
1- PhpMyFAQ: 25 Vulnerabilities Including Critical Auth Bypass Disclosed TogetherVypr Intelligence · Oct 17, 2026