Current topics
Webservices may need to be taken offline due to a serious security vulnerability
Published on 21.10.2026
Tampere University and TAMK
Two critical vulnerabilities have been discovered in PHP, software widely used to build online services, and no security updates are yet available for them. To manage the vulnerability and its impacts, we must take protective precautionary measures, such as taking online services offline, or implement other measures, such as restricting access to services to users connected through VPN.
Two critical vulnerabilities have been discovered in PHP, software that is very widely used to implement online services. No security updates are yet available for these vulnerabilities. The Tampere Universities Community has several services that use PHP. To manage the vulnerability and its impacts, we may need to take protective precautionary measures, such as taking websites offline, or implement other measures, such as restricting services to users connected through VPN.
The EU Agency for Cybersecurity has advised that vulnerable services be taken offline until the updates have been successfully installed. The updates are expected to be released on Wednesday, 21 October 2026, at 17:00 Finnish time.
