Service restoration is underway, and several solutions have been successfully restored. Our teams continue to work diligently to restore the remaining impacted solutions.
Posted Oct 21, 2026 - 15:43 MDT
Update
We are continuing to work on a fix for this issue.
Posted Oct 21, 2026 - 14:15 MDT
Identified
We have been deploying a fix for all solutions impacted by the recently identified global PHP security vulnerabilities.
We expect to gradually restore all solutions to be fully operational over the next 24 hours.
Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers.
What you need to know:
• Investigations are complete on all Granicus solutions.
• There is no known breach of Granicus systems, and there is currently no indication of malicious activity or exploitation affecting our products.
• All solutions with possible vulnerabilities have been taken down, as recommended by government cybersecurity agencies.
• Our teams are treating this as a high-priority issue and are working on remediation to safely restore services for all impacted solutions.
Posted Oct 21, 2026 - 14:03 MDT
Update
Our teams remain actively engaged in remediation efforts. We will continue to provide updates as progress is made and additional information becomes available.
Thank you, Granicus Customer Support
Posted Oct 21, 2026 - 12:13 MDT
Update
Our teams remain actively engaged in remediation efforts. We will continue to provide updates as progress is made and additional information becomes available.
Posted Oct 21, 2026 - 10:45 MDT
Update
We are continuing to investigate this issue.
Posted Oct 21, 2026 - 09:42 MDT
Investigating
We are aware of a recently identified PHP security vulnerability with widespread impact on internet services globally. We are actively assessing its potential impact on Granicus solutions. As recommended by government cybersecurity agencies, Granicus has proactively taken some solutions offline while our teams complete the necessary remediation.
Please review the list below to see which solutions are currently impacted.
Our Security, Engineering, and Product teams are treating this as a top priority and are working to address the vulnerability and safely restore service.
We will continue to provide updates as our assessment progresses and additional information becomes available.
Posted Oct 21, 2026 - 09:31 MDT
This incident affects: govMeetings - Live Video, Legislative and Agenda (MediaManager, Live Video, Archive Video, Legistar, Peak, InSite, Boards & Commissions, iLegislate, IQM2, Swagit), govService (govService U.K., govService U.S.), and Simpleview Products (Book › Direct, DAM).