PHP Vulnerability Responses by Company

Wikimedia Foundation

Global cloud / infrastructure
Aliases / services
Wikimedia / MediaWiki / ウィキメディア / メディアウィキ / Wikimedia Foundation
Official website
https://www.mediawiki.org/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

MediaWiki (self-managed)

Response status
PHP update advised
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

A nonprofit foundation developing and supporting MediaWiki.

Wikimedia's incident page advises MediaWiki operators to update PHP immediately.

Scope: Cloud VPS and Toolforge restoration does not establish patching of independent MediaWiki sites.

What users should do

Apply patched PHP to the running environment and follow vendor guidance.

Official service URL

Source URLs

  1. https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Communityhttps://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/CommunityResponse evidence

Wikimedia Cloud VPS

Response status
Partially restored; maintainer action
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Most projects are re-enabled; some remain offline awaiting PHP upgrades.

Scope: Official October27 update; not all projects are restored.

What users should do

Follow maintainer instructions and complete required PHP upgrades.

Source URLs

  1. https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Communityhttps://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/CommunityResponse evidence

Wikimedia Toolforge

Response status
Partially restored; patched images available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Patched PHP8.2/8.4 images are available, with build-method restrictions remaining.

Scope: Older PHP and other package installations remain restricted; not all tools restored.

What users should do

Rebuild/update using allowed images and restart where required.

Source URLs

  1. https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Communityhttps://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/CommunityResponse evidence
Related official sources
  1. MediaWiki installation requirementsOfficial information directory

Comments