PHP Critical Vulnerabilities - emergency restarts
Ongoing · last updateidentifiedOct 21 · 21:24 UTC
During the evening of 21/10/26 2 critical PHP vulnerabilities were announced(cve-2026-109618 & cve-2026-109619) with patches released by PHP at about 1:30am 22/10/26AEST. Studentnet immediately downloaded and applied the patches to our production builds. Application was completed by 2:30am 22/10/26AEST. Studentnet is now testing those production builds in preparation for immediate individual deployment to all schools through the rest of today. Redeployment will result in a minor outage for new authentications of approximately 10-15minutes. Existing authenticated sessions will not be interrupted. Redeployment will not change your current installed version of Studentnet. These redeployments are being applied on an emergency service availability, as soon as possible, basis. They will not be scheduled individually in advance. If you have any specific scheduling requirements we will endeavour to do our best to comply. Please raise a ticket at https://support.studentnet.net or by emailing to help@studentnet.net. Please be aware that redployment cannot be avoided. Studentnet will advise further via this status notification system and on our web site home page.
Reported by Studentnet® on their status page.