PHP applications restricted to on-campus use for emergency patching

Update timeline

1. identified Oct 21, 2026, 12:16 PM UTC

   All Geneseo PHP applications are restricted to on-campus use this morning while CIT performs emergency patching in response to a recent security vulnerability. This includes PHP applications on our main web server, such as CAS menus, go.geneseo.edu web addresses, and the Transfer Data Bank, as well as AIMS, Omeka, OASIS, and DANL330. On-campus users may experience intermittent access while patching is underway. We anticipate that patching will be completed by noon Eastern Time and will update this status as services are fully restored.

2. identified Oct 21, 2026, 03:42 PM UTC

   Emergency patching will extend beyond noon. On-campus-only restrictions remain in effect for affected PHP applications. We will provide another update as soon as the patches are accessible and a revised restoration estimate is available.

3. monitoring Oct 21, 2026, 08:08 PM UTC

   Our main PHP applications, including www and myGeneseo, have been patched and are once again accessible from off campus. Our security team will continue to monitor this security issue, and we will share updates as needed. Thank you for your patience. Please follow status.geneseo.edu for future notifications from CIT.