PHP Security Vulnerabilities

Incident Report for Engaging Networks

Resolved

The security patches for the recent PHP vulnerabilities have been released. Our team successfully deployed the fix to P2P2 (Legacy P2P) shortly after 4:00 PM.
Posted Oct 21, 2026 - 20:28 UTC

Monitoring

On October 21, 2026, two security vulnerabilities affecting PHP, a programming language used by a large share of websites worldwide, were publicly disclosed. Our team has been monitoring the situation closely.

What this means for you:
• P2P2 (Legacy P2P) is the only part of the Engaging Networks platform affected. All other areas of the platform are not impacted.
• P2P2 (Legacy P2P) sits behind Cloudflare, which deployed protections against these vulnerabilities before they were publicly announced. That protection is active now.
• We will apply the PHP security update to P2P2 (Legacy P2P) as soon as it is available, and will update this page once it is complete.

No action is needed on your part. If you have any questions, please reach out to your Account Manager or our Support team.
Posted Oct 21, 2026 - 19:50 UTC
This incident affected: Application.