CVE-2026-111901
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Oct 17, 2026
Vendor
unknown
Description
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the server.