一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月18日

CVE-2026-111901 [HIGH] – phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulne

未分类
📑 文章目录

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the server.