PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 patched

Monsta_AU

...can I interest you in some vintage blades?
Staff member
Forum Administrator
Grand Society
Hi Pasters!

Wanted to drop a quick note to you all. If you have heard about the PHP vulnerabilities that are in the news, including affecting .gov.au websites, you will be aware that the issue is extremely serious and widespread.

Yes, our forum software (XenForo) is written in PHP. It is just a scripting language you can write software in, and the scripts and software itself has no concerns. The vulnerability is in the server side software that runs the scripts. I have patched the server and updated our PHP version to v8.5 since we were on v8.2.

I have done a basic test but everything looks okay so far. If you find an issue please let me know below.
 
Back
Top