A RCE (remote code execution) exploit has been discovered in PHPbb:
https://www.php.net/archive/2026.php#2026-10-20-1
The exploit is not yet public, but it will likely be abused as soon as the patch is released and reverse-engineered.
Can someone please alert Nathaniel (I've sent him an email as well, but any other means would be great) and take a backup of all posts/attachments on the forums? The exploit would allow the entire forum to be wiped by a bad actor.
This MUST be done before 14:00 UTC, which is when the patch is released.
PHPbb exploit
-
LuveelVoom
- Posts: 844
- Joined: April 27th, 2022, 7:59 pm
PHPbb exploit
OCA primer (WIP): User:LuveelVoom/A_Primer_On_OCA
My rules: https://conwaylife.com/forums/viewtopic.php?f=11&t=6843
Free compute: https://conwaylife.com/forums/viewtopic ... 77#p234677
Discord user: LuveelVoom
My rules: https://conwaylife.com/forums/viewtopic.php?f=11&t=6843
Free compute: https://conwaylife.com/forums/viewtopic ... 77#p234677
Discord user: LuveelVoom
-
NNlk05
- Posts: 784
- Joined: January 14th, 2026, 8:42 pm
- Location: Exploring in the Jungle of the INT Rulespace
- Contact:
Re: PHPbb exploit
Ref: https://conwaylife.com/forums/viewtopic ... 27#p238127
Unfortunately, it's quite late in Eastern Canada right now...
Unfortunately, it's quite late in Eastern Canada right now...
Feci quod potui, faciant meliora potentes.
https://nnlk05.github.io
=3
Code: Select all
x = 10, y = 3, rule = B34twz/S23
b2o4b2o$obo4bobo$2bo4bo!
[[ AUTOSTART AUTOHIDEGUI TRACK 0 -47/270 ZOOM 4 GPS 45 STEP 3 THEME BOOK ]]
=3
-
LuveelVoom
- Posts: 844
- Joined: April 27th, 2022, 7:59 pm
Re: PHPbb exploit
Someone needs to back up the forums ASAP.
OCA primer (WIP): User:LuveelVoom/A_Primer_On_OCA
My rules: https://conwaylife.com/forums/viewtopic.php?f=11&t=6843
Free compute: https://conwaylife.com/forums/viewtopic ... 77#p234677
Discord user: LuveelVoom
My rules: https://conwaylife.com/forums/viewtopic.php?f=11&t=6843
Free compute: https://conwaylife.com/forums/viewtopic ... 77#p234677
Discord user: LuveelVoom
-
Nathaniel
- Site Admin
- Posts: 907
- Joined: December 10th, 2008, 3:48 pm
- Location: New Brunswick, Canada
- Contact:
Re: PHPbb exploit
That PHP patch has now been applied, fixing this security issue.
Re: PHPbb exploit
I'm seeing rumours of a second vulnerability: https://fedi.katze.sh/@elise/117479383739450605. Might be worth paying close attention for the next few days.