CVE-2026-111901

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-111901

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111901.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-111901

Aliases

GHSA-m42f-6p37-2c79

Published

2026-10-17T18:46:22Z

Modified

2026-10-20T02:30:32Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination

Details

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the server.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-400"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111901.json"
}

References

Affected packages

Git / github.com/thorsten/phpmyfaq

Affected ranges

Type

GIT

Repo

https://github.com/thorsten/phpmyfaq

Events

Introduced

a429fb81a4efe1f7c0aeec5b7bf8a98a50509b85

Fixed

e137c1e017b15ffa01181a2380b81e1aea5ae1ad

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "4.2.0-alpha"
        },
        {
            "fixed":  "4.2.0-beta"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*

4.1-nightly-2026-08-09

4.1-nightly-2026-08-10

4.1-nightly-2026-08-11

4.1-nightly-2026-08-12

4.1-nightly-2026-08-13

4.1-nightly-2026-08-14

4.1-nightly-2026-08-15

4.1-nightly-2026-08-16

4.1-nightly-2026-08-17

4.1-nightly-2026-08-18

4.1-nightly-2026-08-19

4.1-nightly-2026-08-20

4.1-nightly-2026-08-21

4.1-nightly-2026-08-24

4.1-nightly-2026-08-25

4.1-nightly-2026-08-26

4.1-nightly-2026-08-27

4.1-nightly-2026-08-28

4.1-nightly-2026-08-29

4.1-nightly-2026-08-30

4.1-nightly-2026-08-31

4.1-nightly-2026-09-01

4.1-nightly-2026-09-02

4.1-nightly-2026-09-03

4.1-nightly-2026-09-04

4.1-nightly-2026-09-05

4.1-nightly-2026-09-06

4.1-nightly-2026-09-07

4.1-nightly-2026-09-08

4.1-nightly-2026-09-09

4.1-nightly-2026-09-10

4.1-nightly-2026-09-11

4.1-nightly-2026-09-12

4.1-nightly-2026-09-13

4.1-nightly-2026-09-14

4.1-nightly-2026-09-15

4.1-nightly-2026-09-16

4.1-nightly-2026-09-17

4.1-nightly-2026-09-18

4.1-nightly-2026-09-20

4.1-nightly-2026-09-21

4.1-nightly-2026-09-22

4.1-nightly-2026-09-23

4.1-nightly-2026-09-24

4.1-nightly-2026-09-25

4.1-nightly-2026-09-26

4.1-nightly-2026-09-27

4.1-nightly-2026-09-28

4.1-nightly-2026-09-29

4.1-nightly-2026-09-30

4.1-nightly-2026-10-01

4.1-nightly-2026-10-02

4.1-nightly-2026-10-03

4.2.0-alpha

4.2.0-alpha.2

Other

development-nightly-2026-08-09

development-nightly-2026-08-10

development-nightly-2026-08-11

development-nightly-2026-08-12

development-nightly-2026-08-13

development-nightly-2026-08-14

development-nightly-2026-08-15

development-nightly-2026-08-16

development-nightly-2026-08-17

development-nightly-2026-08-18

development-nightly-2026-08-19

development-nightly-2026-08-20

development-nightly-2026-08-21

development-nightly-2026-08-24

development-nightly-2026-08-25

development-nightly-2026-08-26

development-nightly-2026-08-27

development-nightly-2026-08-28

development-nightly-2026-08-29

development-nightly-2026-08-30

development-nightly-2026-08-31

development-nightly-2026-09-01

development-nightly-2026-09-02

development-nightly-2026-09-03

development-nightly-2026-09-04

development-nightly-2026-09-05

development-nightly-2026-09-06

development-nightly-2026-09-07

development-nightly-2026-09-08

development-nightly-2026-09-09

development-nightly-2026-09-10

development-nightly-2026-09-11

development-nightly-2026-09-12

development-nightly-2026-09-13

development-nightly-2026-09-14

development-nightly-2026-09-15

development-nightly-2026-09-16

development-nightly-2026-09-17

development-nightly-2026-09-20

development-nightly-2026-09-21

development-nightly-2026-09-22

development-nightly-2026-09-23

development-nightly-2026-09-24

development-nightly-2026-09-25

development-nightly-2026-09-26

development-nightly-2026-09-27

development-nightly-2026-09-28

development-nightly-2026-09-29

development-nightly-2026-09-30

development-nightly-2026-10-01

development-nightly-2026-10-02

development-nightly-2026-10-03

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111901.json"