Resolved after 22 hours 7 minutes, affecting MediaManager and govService U.K. and 1 more, on October 21, 2026.
We deployed the fix for all solutions impacted by the recently identified global PHP security vulnerabilities that affected internet services globally. As recommended by government cybersecurity agencies worldwide, Granicus proactively took some solutions offline while our teams completed the necessary remediation. All solutions were restored within 24 hours and are now operational. If you are still experiencing issues, please reach out to Granicus Technical Support. Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers.
Affected components
Update timeline
- investigating Oct 21, 2026, 03:31 PM UTC
We are aware of a recently identified PHP security vulnerability and are actively assessing its potential impact. As a precaution, Granicus has temporarily taken GovService, Swagit, Simpleview - Book Direct and Media Manager offline while our teams complete the necessary remediation. At this time, we have no indication of malicious activity or exploitation affecting GovService, Swagit, Simpleview - Book Direct. Our Security, Engineering, and Product teams are treating this as a top priority and are working to address the vulnerability and safely restore service. We will continue to provide updates as our assessment progresses and additional information becomes available.
- investigating Oct 21, 2026, 03:42 PM UTC
We are continuing to investigate this issue.
- investigating Oct 21, 2026, 03:49 PM UTC
We are continuing to investigate this issue.
- investigating Oct 21, 2026, 06:13 PM UTC
Our teams remain actively engaged in remediation efforts. We will continue to provide updates as progress is made and additional information becomes available. Thank you, Granicus Customer Support
- identified Oct 21, 2026, 08:03 PM UTC
We have been deploying a fix for all solutions impacted by the recently identified global PHP security vulnerabilities. We expect to gradually restore all solutions to be fully operational over the next 24 hours. Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers. What you need to know: • Investigations are complete on all Granicus solutions. • There is no known breach of Granicus systems, and there is currently no indication of malicious activity or exploitation affecting our products. • All solutions with possible vulnerabilities have been taken down, as recommended by government cybersecurity agencies. • Our teams are treating this as a high-priority issue and are working on remediation to safely restore services for all impacted solutions.
- identified Oct 21, 2026, 08:15 PM UTC
We are continuing to work on a fix for this issue.
- identified Oct 21, 2026, 09:43 PM UTC
Service restoration is underway, and several solutions have been successfully restored. Our teams continue to work diligently to restore the remaining impacted solutions.
- identified Oct 22, 2026, 12:11 AM UTC
Service restoration is progressing, and additional solutions have now been successfully restored. Our teams remain actively engaged in restoring the remaining impacted services. We will continue to provide updates as services are restored.
- identified Oct 22, 2026, 04:03 AM UTC
Service restoration continues to progress. Our teams remain actively engaged in restoring the remaining impacted services. We will continue to provide updates as services are restored.
- identified Oct 22, 2026, 07:20 AM UTC
Restoration efforts continue to make steady progress. Our teams remain focused on validating and deploying solutions for the remaining affected applications and products as we work toward full service restoration. We will continue to share updates as progress is made. Thank you for your patience and continued partnership.
- identified Oct 22, 2026, 09:33 AM UTC
We continue to make positive progress towards full remediation. Our teams remain fully engaged and are treating resolution as our highest priority. Based on current progress, we expect services to be available by 1:00 PM GMT. We will provide a further update by 1:00 PM GMT.
- identified Oct 22, 2026, 12:31 PM UTC
We continue to make strong progress toward full restoration, with nearly all affected services now fully operational. Our teams remain focused on final remediation and validation activities to ensure a safe and complete recovery. We appreciate the patience and partnership of our customers throughout this event. Maintaining the security, stability, and reliability of our services remains our highest priority, and we will continue to provide updates until all restoration activities are complete.
- resolved Oct 22, 2026, 01:39 PM UTC
We deployed the fix for all solutions impacted by the recently identified global PHP security vulnerabilities that affected internet services globally. As recommended by government cybersecurity agencies worldwide, Granicus proactively took some solutions offline while our teams completed the necessary remediation. All solutions were restored within 24 hours and are now operational. If you are still experiencing issues, please reach out to Granicus Technical Support. Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers.
Your product runs on more than Granicus
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services