PHP applications restricted to on-campus use for emergency patching

Incident Report for CIT Geneseo Status

Monitoring

Our main PHP applications, including www and myGeneseo, have been patched and are once again accessible from off campus. Our security team will continue to monitor this security issue, and we will share updates as needed.

Thank you for your patience. Please follow status.geneseo.edu for future notifications from CIT.
Posted Oct 21, 2026 - 16:08 EDT

Update

Emergency patching will extend beyond noon. On-campus-only restrictions remain in effect for affected PHP applications. We will provide another update as soon as the patches are accessible and a revised restoration estimate is available.
Posted Oct 21, 2026 - 11:42 EDT

Identified

All Geneseo PHP applications are restricted to on-campus use this morning while CIT performs emergency patching in response to a recent security vulnerability. This includes PHP applications on our main web server, such as CAS menus, go.geneseo.edu web addresses, and the Transfer Data Bank, as well as AIMS, Omeka, OASIS, and DANL330.

On-campus users may experience intermittent access while patching is underway. We anticipate that patching will be completed by noon Eastern Time and will update this status as services are fully restored.
Posted Oct 21, 2026 - 08:16 EDT
This incident affects: Web (Geneseo Website, Wordpress (wp.geneseo.edu)) and CIT Announcement.