PHP Vulnerability Responses by Company

Universität Wien

Global cloud / infrastructure
Aliases / services
Universität Wien / University of Vienna / ウィーン大学 / ZID Universität Wien
Official website
https://www.univie.ac.at/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Webmail

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

University whose ZID operates web, Moodle and cloud-storage services.

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

u:cloud

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

Moodle

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

u:rise

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

BigBlueButton

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

u:ai

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

HRFI

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

almaubw

Response status
Reported restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The central IT update lists this service as available again after remediation, analysis and protective measures.

Scope: University of Vienna scope only; remaining TYPO3 restrictions and separate VPN work are excluded.

What users should do

Use normally; report issues to ZID.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence

University TYPO3 websites and legacy backend

Response status
Mostly restored; legacy shutdown announced
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Most websites are restored. The October 23 notice says the old backend lacks server patches and is expected offline until early November during reconfiguration.

Scope: Old and new URLs form one service scope; an expected end date does not establish restoration.

What users should do

Legacy users should follow the official emergency migration workflow and updates.

Source URLs

  1. PHP2Shell response and scopehttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-zentraler-it-services-sicherheitsmassnahmeResponse evidence
  2. https://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-alte-typo3-instanz-backendhttps://zid.univie.ac.at/wartungsarbeiten/artikel/praeventive-abschaltung-alte-typo3-instanz-backendResponse evidence

University VPN (F5)

Response status
Fixed software installation announced
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The article schedules installation of F5 software fixing last week’s PHP issue for October 27 22:00–October 28 01:00; no completion report was found.

Scope: Uses article dates; elapsed maintenance windows do not prove completion. University VPN only.

What users should do

Check follow-up results and contact ZID for connectivity problems.

Source URLs

  1. https://zid.univie.ac.at/wartungsarbeiten/artikel/dringend-notwendiger-software-upgrade-vpnhttps://zid.univie.ac.at/wartungsarbeiten/artikel/dringend-notwendiger-software-upgrade-vpnResponse evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments