On 21 October 2026, the PHP project released fixes for two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting PHP installations worldwide.
We acted on the advisory as soon as we could. A temporary protective measure was in place while we waited for the official patches, and all ForumSpark servers were updated to the patched PHP versions as soon as they became available.
No action is needed from board owners or members. Your forums remain online and work as usual.
If you have any questions, contact our support team.