Critical incident

Granicus System: Temporary Service Unavailability

Affected: MediaManager, govService U.K., Live Video, govService U.S., Archive Video, Legistar, Book › Direct, Peak, InSite, Boards & Commissions, DAM, iLegislate, IQM2, Swagit

Current status of Granicus System: Operational — live Granicus System status

Timeline

1. Oct 21, 2026, 15:31 UTC
   investigating
   We are aware of a recently identified PHP security vulnerability with widespread impact on internet services globally. We are actively assessing its potential impact on Granicus solutions. As recommended by government cybersecurity agencies, Granicus has proactively taken some solutions offline while our teams complete the necessary remediation. Please review the list below to see which solutions are currently impacted. Our Security, Engineering, and Product teams are treating this as a top priority and are working to address the vulnerability and safely restore service. We will continue to provide updates as our assessment progresses and additional information becomes available.
2. Oct 21, 2026, 15:42 UTC
   investigating
   We are continuing to investigate this issue.
3. Oct 21, 2026, 16:45 UTC
   investigating
   Our teams remain actively engaged in remediation efforts. We will continue to provide updates as progress is made and additional information becomes available.
4. Oct 21, 2026, 18:13 UTC
   investigating
   Our teams remain actively engaged in remediation efforts. We will continue to provide updates as progress is made and additional information becomes available. Thank you, Granicus Customer Support
5. Oct 21, 2026, 20:03 UTC
   identified
   We have been deploying a fix for all solutions impacted by the recently identified global PHP security vulnerabilities. We expect to gradually restore all solutions to be fully operational over the next 24 hours. Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers. What you need to know: • Investigations are complete on all Granicus solutions. • There is no known breach of Granicus systems, and there is currently no indication of malicious activity or exploitation affecting our products. • All solutions with possible vulnerabilities have been taken down, as recommended by government cybersecurity agencies. • Our teams are treating this as a high-priority issue and are working on remediation to safely restore services for all impacted solutions.
6. Oct 21, 2026, 20:15 UTC
   identified
   We are continuing to work on a fix for this issue.
7. Oct 21, 2026, 21:43 UTC
   identified
   Service restoration is underway, and several solutions have been successfully restored. Our teams continue to work diligently to restore the remaining impacted solutions.
8. Oct 22, 2026, 00:11 UTC
   identified
   Service restoration is progressing, and additional solutions have now been successfully restored. Our teams remain actively engaged in restoring the remaining impacted services. We will continue to provide updates as services are restored.
9. Oct 22, 2026, 04:03 UTC
   identified
   Service restoration continues to progress. Our teams remain actively engaged in restoring the remaining impacted services. We will continue to provide updates as services are restored.
10. Oct 22, 2026, 07:20 UTC
    identified
    Restoration efforts continue to make steady progress. Our teams remain focused on validating and deploying solutions for the remaining affected applications and products as we work toward full service restoration. We will continue to share updates as progress is made. Thank you for your patience and continued partnership.
11. Oct 22, 2026, 09:33 UTC
    identified
    We continue to make positive progress towards full remediation. Our teams remain fully engaged and are treating resolution as our highest priority. Based on current progress, we expect services to be available by 1:00 PM GMT. We will provide a further update by 1:00 PM GMT.
12. Oct 22, 2026, 12:31 UTC
    identified
    We continue to make strong progress toward full restoration, with nearly all affected services now fully operational. Our teams remain focused on final remediation and validation activities to ensure a safe and complete recovery. We appreciate the patience and partnership of our customers throughout this event. Maintaining the security, stability, and reliability of our services remains our highest priority, and we will continue to provide updates until all restoration activities are complete.
13. Oct 22, 2026, 13:39 UTC
    resolved
    We deployed the fix for all solutions impacted by the recently identified global PHP security vulnerabilities that affected internet services globally. As recommended by government cybersecurity agencies worldwide, Granicus proactively took some solutions offline while our teams completed the necessary remediation. All solutions were restored within 24 hours and are now operational. If you are still experiencing issues, please reach out to Granicus Technical Support. Our Security Operations Center (SOC) continues to monitor around the clock for unusual activity and potential security incidents. We remain on heightened alert for threats that could affect our systems or those of our customers.

Updates as published by Granicus System (original).