Security Alert: Critical PHP Vulnerability – Possible Temporary Service Interruptions

Computing Services shared a security alert with the campus community regarding a critical vulnerability in PHP, a popular server-side scripting language.

This vulnerability affects university servers and websites that are running outdated or unpatched PHP software. If not addressed, it could allow unauthorized attackers to compromise these servers. Additionally, the flaw may also impact third-party web applications and services used throughout the university.

Application owners and IT staff across Computing Services and campus departments are currently assessing their systems, applying necessary security patches, and testing their infrastructure. Please note that some services and web applications may be temporarily taken offline while administrators implement these updates.

All application owners and web administrators should review the remediation guidelines immediately. Applications that remain unpatched risk being blocked or having their server access restricted to ensure network security. Administrators overseeing third-party-hosted services are also encouraged to confirm whether their systems are patched or remain unprotected.

Last Updated: 10/22/26