Security Flaw in TufayelLUS TikTok-Video-Downloader-PHP TLS Handler
CVE-2026-112106

6.3MEDIUM

Key Information:

Vendor

Tufayellus

Status
Tiktok-video-downloader-PHP
Vendor
CVE Published:
19 October 2026

What is CVE-2026-112106?

A security vulnerability has been identified in the TufayelLUS TikTok-Video-Downloader-PHP due to improper certificate validation within the TLS Handler's index.php file. This flaw enables remote attackers to potentially manipulate the certificate validation process. Attack exploitation is known to be complex, making it challenging to execute successfully. Users are strongly advised to apply the patch identified by commit 64c0155abb88e714198241d41b918cefc0d5a42a to mitigate the risks associated with this vulnerability.

Affected Version(s)

TikTok-Video-Downloader-PHP c4230497bb23dd9c1f81456fe8a982d951feac0d

References

https://vuldb.com/vuln/422061
vdb-entry
https://vuldb.com/vuln/422061/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-112106
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NeoWSY (VulDB User)
.