Granicus is currently experiencing a critical incident affecting MediaManager and govService U.K. and 1 more component, which began 11h ago. The vendor's full update timeline is below.
Affected components
Update timeline
- investigating Oct 21, 2026, 03:31 PM UTC
We are aware of a recently identified PHP security vulnerability and are actively assessing its potential impact. As a precaution, Granicus has temporarily taken GovService, Swagit, Simpleview - Book Direct and Media Manager offline while our teams complete the necessary remediation. At this time, we have no indication of malicious activity or exploitation affecting GovService, Swagit, Simpleview - Book Direct. Our Security, Engineering, and Product teams are treating this as a top priority and are working to address the vulnerability and safely restore service. We will continue to provide updates as our assessment progresses and additional information becomes available.
- investigating Oct 21, 2026, 03:42 PM UTC
We are continuing to investigate this issue.
- investigating Oct 21, 2026, 03:49 PM UTC
We are continuing to investigate this issue.
- investigating Oct 21, 2026, 06:13 PM UTC
Our teams remain actively engaged in remediation efforts. We will continue to provide updates as progress is made and additional information becomes available. Thank you, Granicus Customer Support
- identified Oct 21, 2026, 08:03 PM UTC
We have been deploying a fix for all solutions impacted by the recently identified global PHP security vulnerabilities. We expect to gradually restore all solutions to be fully operational over the next 24 hours. Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers. What you need to know: • Investigations are complete on all Granicus solutions. • There is no known breach of Granicus systems, and there is currently no indication of malicious activity or exploitation affecting our products. • All solutions with possible vulnerabilities have been taken down, as recommended by government cybersecurity agencies. • Our teams are treating this as a high-priority issue and are working on remediation to safely restore services for all impacted solutions.
- identified Oct 21, 2026, 08:15 PM UTC
We are continuing to work on a fix for this issue.
- identified Oct 21, 2026, 09:43 PM UTC
Service restoration is underway, and several solutions have been successfully restored. Our teams continue to work diligently to restore the remaining impacted solutions.
- identified Oct 22, 2026, 12:11 AM UTC
Service restoration is progressing, and additional solutions have now been successfully restored. Our teams remain actively engaged in restoring the remaining impacted services. We will continue to provide updates as services are restored.