Rubin website outage (21 October 2026)

[kmetzger (Kristen Metzger)]

Hi all, this morning we were notified of a critical vulnerability affecting millions of websites, including rubinobservatory.org, that has required us to disable it and our other Craft-based applications until a security patch is applied. The clients will likely remain functional for a while, but some functionality will likely break right away. We’ll restore these products when the security patch is applied. Thanks for your patience!

UPDATE: rubinobservatory.org is back online

[scottstirling (Scott)]

Sounds like this? Two major PHP vulnerabilities (patch available):

Websites taken down worldwide as critical PHP cyber-security update issued

[kherner (Ken Herner)]

Almost certainly. For those who maintain websites, or know those who do, patches are available and should be applied ASAP: PHP: News Archive - 2026

[rafael (Rafael Espinoza P)]

@kmetzger

a critical vulnerability affecting millions of websites, including rubinobservatory.org, that has required us to disable it and our other Craft-based applications until a security patch is applied. The clients will likely remain functional for a while, but some functionality will likely break right away. We’ll restore these products when the security patch is applied. Thanks for your patience!

Tks a los , for your kind advice.

[wfgriffeth (Bill Griffeth)]

This is bad! https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/