No impact incident

UVic IT: Critical Security Vulnerability Affecting UVic Services

Oct 21, 2026, 19:45 UTC

started

22:15 UTC

resolved

2 h 29 min

duration

Affected: Single Sign-on, Other Login Services, Other Enterprise Systems, Self-serve Web Hosting

Current status of UVic IT: Operational — live UVic IT status

Timeline

Oct 21, 2026, 19:45 UTC
monitoring
A global cybersecurity issue has been discovered that is affecting systems world-wide, including the UVic website (www.uvic.ca) and personal web hosting (web.uvic.ca). To protect university systems and information, University Systems has temporarily taken these services offline while we work to address the issue. We do not yet know when services will be restored because we are waiting for a security update from system vendors. This outage will impact the sign-in to UVic service for all online tools like Brightspace. Off campus If you are off-campus, uvic.ca and sign in to online tools will not be available. On campus If you are on campus, you will be able to access uvic.ca and sign in to online tools. We know this disruption will have a significant impact on our community. We are working to restore services as quickly and safely as possible. Thank you for your patience. We will post updates at https://news.uvic.ca/ as more information becomes available.
Oct 21, 2026, 19:57 UTC
monitoring
We have partially restored the sign-in to UVic services from both on and off campus. Users should experience no disruption to sign-in to major online tools like Brightspace.
Oct 21, 2026, 19:59 UTC
monitoring
We have partially restored the sign-in to UVic services from both on and off campus. Users should experience no disruption to sign-in to major online tools like Brightspace.
Oct 21, 2026, 22:15 UTC
resolved
University Systems has patched the vulnerability and resolved the issues with uvic.ca and web.uvic.ca. These systems have been restored and should be operating normally from on and off campus. If you continue to experience any problems, please contact the Computer Help Desk.

Updates as published by UVic IT (original).

Other services with incidents at the same time

This was part of a wider event: 109 services reported incidents within the hour.

LogicMonitor 20:45 UTC · LogicMonitor is currently investigating potential impacts to our Account Access Component(s).
Parchment 20:45 UTC · Instructure is aware of CVE-2026-109618 and CVE-2026-109619 (referred to as "PHP2Shell"), affecting PHP.
Instructure 20:43 UTC · PHP awareness
Kandji 20:37 UTC · Slow Load Times in the Iru Web App
impact.com 20:23 UTC · General Reporting Delay - Actions only (Tracking Unaffected)
UserTesting 20:12 UTC · Tree Test and Card Sort
Kaseya 20:08 UTC · RocketCyber - EU Region - Pages loading slow or not at all
Lightspeed Systems 20:07 UTC · PHP Security Update
Paddle 20:04 UTC · Issue affecting metrics and reporting in the seller dashboard
SEVENROOMS 19:50 UTC · SevenRooms OS – Delayed Real-Time Updates Due to Google Firebase Incident
Anthropic (Claude) 19:49 UTC · Degraded performance for Claude Fable 5
Circle 19:46 UTC · CCTP Attestations - Delays/Degraded Performance
HackerOne 19:45 UTC · Slow response times and report sidebar outage
uchicago 19:43 UTC · Web Service Outage
OpenText 19:37 UTC · Core US services were unavailable

More UVic IT incidents

October 21, 2026 UVic Web Hosting Service
October 20, 2026 BC time-zone change may affect calendar meetings
October 13, 2026 Request Support Form: Users unable to submit tickets through webforms
October 6, 2026 Apex: Outage - users unable to access apex applications
September 28, 2026 StarRez: Outage - users unable to sign in
September 16, 2026 Sign-in to UVic: Intermittent outage - users unable to sign-in to online applications