CVE-2026-112106
lowA security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d.
A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The name of the patch is 64c0155abb88e714198241d41b918cefc0d5a42a. It is advisable to implement a patch to correct this issue.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/TufayelLUS/TikTok-Video-Downloader-PHP/ cna@vuldb.com
- https://github.com/TufayelLUS/TikTok-Video-Downloader-PHP/commit/64c0155abb88e714198241d41... cna@vuldb.com
- https://github.com/TufayelLUS/TikTok-Video-Downloader-PHP/issues/55 cna@vuldb.com
- https://vuldb.com/cve/CVE-2026-112106 cna@vuldb.com
- https://vuldb.com/submit/1013136 cna@vuldb.com
- https://vuldb.com/vuln/422061 cna@vuldb.com
- https://vuldb.com/vuln/422061/cti cna@vuldb.com