PHP2SHELL (CVE-2026-109618/109619) Emergency Patching

Scheduled Maintenance Report for CILogon

Completed

The scheduled maintenance has been completed.
Posted Oct 21, 2026 - 18:06 CDT

Update

Full Tier subscriber registries are still being updated subscriber by subscriber. Essential Tier registries are now up. Please test functionality in your environment and report any issues to help@cilogon.org.
Posted Oct 21, 2026 - 16:06 CDT

Update

CILogon login and web services are now operating normally. COManage Registries are being restored one subscriber at a time and updated to Registry v4.6.1 as part of this process. We will notify each subscriber directly when their instance is complete.
Posted Oct 21, 2026 - 14:19 CDT

Update

We are continuing to patch the effected systems. The maintenance window has been extended until 4pm eastern time.
Posted Oct 21, 2026 - 12:12 CDT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 21, 2026 - 09:00 CDT

Scheduled

Emergency maintenance: Starting at 10am Eastern today CILogon web, login, and COmanage Registry may be intermittently unavailable while we are applying critical PHP security updates (CVE-2026-109618/109619).  End time is unknown as of now.
Posted Oct 21, 2026 - 08:54 CDT
This scheduled maintenance affected: cilogon.org, registry.cilogon.org, and www.cilogon.org.