iniBuilds has said it has secured its web services, including its community forum, after a critical security vulnerability was found in PHP. The developer described the issue and its response in a security notice posted online, and says users do not need to take any action.
According to iniBuilds, the PHP development team released a security update on 21 October 2026 that addressed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. The developer explains that, under certain conditions, these flaws could cause memory corruption in PHP and let an attacker run commands remotely on an affected web server without logging in. Because PHP is so widely used, governments and organisations around the world advised everyone running it to act immediately.
PHP is a server-side scripting language that powers many websites and forum platforms, which is why several iniBuilds services fell within the scope of the advisory. The notice follows a similar precaution at another sim company, as we reported when Laminar Research brought its X-Plane services back online after a PHP precaution.
iniBuilds says its team identified every system in its infrastructure that runs PHP, starting with internet-facing services. Mitigations were applied straight away, and all affected services were upgraded to the fixed PHP release, 8.2.35. The team then tested the services and carried out a forensic review of system integrity, application files, databases and access logs. The developer states that this review found no evidence of exploitation or unauthorised access, and that testing confirmed the vulnerabilities are no longer present on its systems.
iniBuilds states that accounts, purchases and data were not affected. The company says it will keep monitoring its infrastructure, follow guidance from PHP and the UK’s NCSC, and share further updates if anything changes.
Feel free to join our Discord server to share your feedback on the article, screenshots from your flights or just chat with the rest of the team and the community. Click here to join the server.
