The City University of New York

Global cloud / infrastructure

Aliases / services: City University of New York / The City University of New York / CUNY / City College of New York / CCNY
Official website: https://www.cuny.edu/

Sources identifying the operating company

https://www.lehman.cuny.edu/media/President/Special-Counsel-to-the-President/documents/Facility-Use-License-Agreement-CUNY.pdf

CUNY is the corporate body. This response source is City College (CCNY) OIT guidance, not an all-campus remediation-complete report.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

CCNY OIT instructions for PHP system owners

Response status: Inventory, patching and log review instructed
Response information checked: 2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

CUNY campus IT; this entry covers CCNY PHP administration and support.

The October 21 City College OIT notice requires PHP inventory, patches, vendor confirmation and log review. Owners unable to complete remediation must report work in progress; risky hosts may be isolated.

Scope: No individual-application or CUNY-wide completion is listed. Generic application examples are not treated as an actual deployed-product inventory.

What users should do

Administrators should apply updates and contact CCNY IT Security about work in progress or suspicious indicators.

Official service URL

https://www.cuny.edu/

Source URLs

PHP2Shell response and scopehttps://www.ccny.cuny.edu/it/security_announcementsResponse evidence

Related official sources

PHP2Shell response and scopeOfficial notice
Operating entityOfficial information directory