Uncontrolled Resource Consumption in phpMyFAQ by Thorsten Barthel

CVE-2026-111901

What is CVE-2026-111901?

The phpMyFAQ 4.2.0-alpha version contains a vulnerability that allows for uncontrolled resource consumption through unauthenticated access to the FAQs and search API endpoints. Attackers can exploit this flaw by sending a high volume of concurrent GET requests, which can result in the application loading and processing extensive database records into PHP memory. This excessive resource usage can exhaust server CPU and memory, ultimately leading to a denial of service condition and server crashes.

References