PHP Vulnerability Responses by Company

ETH Zürich

Global cloud / infrastructure
Aliases / services
ETH Zürich / ETH Zurich / Eidgenössische Technische Hochschule Zürich / Swiss Federal Institute of Technology Zurich / チューリッヒ工科大学 / polybox
Official website
https://ethz.ch/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Campus restrictions; some services suspended
Response information checked
2026-10-24 Rechecked: 2026-10-27

University polybox, Moodle and administrative and research web services.

The October 22 PHP update restricts polybox to ETH networks and suspends daylight, KIDS, KIHZFLEX, LUMINOL, NMRADMIN/NMRSUBMIT, NADEL tools and SCEQ. Moodle is limited to internal networks or VPN.

This recheck could not revalidate all listed information against current official sources. The previous verification date is retained. Check official notices or support for current availability and required action.

What users should do

Use ETH networks for polybox and campus/VPN access for Moodle. Check Service Desk restoration notices for suspended services.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://ethz.ch/staffnet/en/it-services/service-desk.htmlResponse evidence
  2. Operating entityhttps://ethz.ch/en/footer/imprint.htmlService and operation documentation
  3. Legal entityhttps://ethz.ch/students/en/continuing-education/qualifications-grades-credits.htmlService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory
  3. Legal entityOfficial information directory

Comments