Two critical vulnerabilities were recently disclosed in PHP, the software our platform runs on: CVE-2026-109618 and CVE-2026-109619.
On October 22, we upgraded all our servers to PHP 8.5.12, which fixes both issues.
What this means for you
Nothing is required on your side. The update is already live, and it didn't change anything in your account, content, or settings. We have reviewed our systems and found no evidence that either vulnerability was exploited on our platform.
What we did
We tested the fixed PHP version and rolled it out across all our systems as soon as it was released. We monitor security releases for the software we depend on and apply fixes promptly.
If you notice anything unusual or have questions, contact us at support@ning.com.
Thank you for creating with us.
Kind regards,
The Ning Team
Replies