Community Return to multiportal.io
Skip to content
  1. Home
  2. Announcements
  3. Security Advisories

Security Advisories

2 Topics 4 Posts

Official security advisories from the MultiPortal team. Subscribe to this category for notifications about vulnerabilities, security patches, and security-related updates.

  • woodyW

    Security Advisory: Critical PHP Vulnerabilities - CVE-2026-109618 and CVE-2026-109619

    3
    1 Votes
    3 Posts
    356 Views
    woodyW
    For further references on the vulnerabilities Vendor (PHP) Security advisory: https://www.php.net/archive/2026.php#2026-10-21-5 CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp Government advisories CERT-EU Security Advisory 2026-018: https://cert.europa.eu/publications/security-advisories/2026-018/ NCSC-NL operational repository: https://github.com/NCSC-NL/php2shell
  • StellS

    MPSA-2026-001: Stored cross-site scripting in user and resource name fields

    1
    0 Votes
    1 Posts
    1k Views
    StellS
    MultiPortal has published security advisory MPSA-2026-001, a stored cross-site scripting issue in user and resource name fields. Severity: High (CVSS v3.1 base 8.7) Affected: MultiPortal Core 1.1.2, 1.1.3, and 1.2.0 Fixed in: 1.2.1 If you run an affected version, upgrade to 1.2.1 at your next maintenance window. The fix needs no data cleanup: existing names are made safe when they are displayed. Read the full advisory, including impact, remediation, and workaround: MPSA-2026-001 on docs.multiportal.io The fix ships in the 1.2.1 release. To report a vulnerability privately, see Reporting security issues.