ConwayLife.com

A RCE (remote code execution) exploit has been discovered in PHPbb:
https://www.php.net/archive/2026.php#2026-10-20-1
The exploit is not yet public, but it will likely be abused as soon as the patch is released and reverse-engineered.
Can someone please alert Nathaniel (I've sent him an email as well, but any other means would be great) and take a backup of all posts/attachments on the forums? The exploit would allow the entire forum to be wiped by a bad actor.

This MUST be done before 14:00 UTC, which is when the patch is released.

Ref: https://conwaylife.com/forums/viewtopic ... 27#p238127

Unfortunately, it's quite late in Eastern Canada right now...

NNlk05 wrote: October 21st, 2026, 12:07 am Unfortunately, it's quite late in Eastern Canada right now...

Someone needs to back up the forums ASAP.

That PHP patch has now been applied, fixing this security issue.

I'm seeing rumours of a second vulnerability: https://fedi.katze.sh/@elise/117479383739450605. Might be worth paying close attention for the next few days.