Illinois State Tech Alerts

Critical PHP Vulnerabilities

Incident Report for Illinois State University

Monitoring

This Tech Alert will provide the campus community with updates to the ongoing worldwide PHP vulnerability mitigation efforts.

What it is: Two security flaws in PHP were identified that affect many websites, including some of ours at ISU. The companies that maintain PHP have released fixes today, and Universities, businesses, and government agencies around the world are applying those fixes this week. This is not related to the phishing emails that reached campus earlier this month.

What you may notice: Some university websites may be unavailable for short periods while they are updated. A few may be temporarily set to read-only, meaning you can view them but not submit forms or make changes. If a site you use is down, it is most likely being patched and will be back.

What we are doing: Technology Solutions is updating the systems it manages. The Information Security Office is monitoring for signs that any ISU system is being targeted and will take action to keep our systems and data secure until that system is patched and tested.

What you should do: If a website is behaving strangely or you experience an unexpected request for your password, please report it to the Technology Support Center.
Posted Oct 21, 2026 - 16:39 CDT
This incident affects: Help.IllinoisState.edu, My.IllinoisState.edu, Phishing Notifications, and Other IT Services.