{"id":311987,"date":"2026-10-22T16:00:09","date_gmt":"2026-10-22T16:00:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-pa\/311987\/"},"modified":"2026-10-22T16:00:09","modified_gmt":"2026-10-22T16:00:09","slug":"allentown-council-livestream-outage-tied-to-global-php-software-flaw","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-pa\/311987\/","title":{"rendered":"Allentown council livestream outage tied to global PHP software flaw"},"content":{"rendered":"

ALLENTOWN, Pa. \u2014 Allentown City Council\u2019s livestream went down Wednesday after an outage at its video provider, Granicus, which took some products offline due to a critical flaw in PHP, software used to run websites.<\/p>\n

The city said in a notice that \u201ca widespread technical issue affecting Granicus\u201d caused the council\u2019s livestream service to go offline. It said the meeting would go ahead as scheduled and that it planned to post a recording as soon as streaming returned.<\/p>\n

\"TheThe City of Allentown\u2019s notice about the council livestream. (City of Allentown)<\/p>\n

Granicus said in a status update Wednesday: \u201cWe are aware of a recently identified PHP security vulnerability with widespread impact on internet services globally.\u201d It later said its investigations were complete, that it knows of no breach of its systems and that it saw no sign of malicious activity.<\/p>\n

By Thursday morning the video was back. Wednesday\u2019s recording is posted on Swagit and runs 1 hour, 58 minutes. Swagit, a Granicus product, hosts the city\u2019s council videos, according to the city\u2019s meeting calendar. Granicus\u2019s status page<\/a> showed its video products working, with one product still being fixed: Legistar, the software behind the city\u2019s calendar and agendas, which Granicus said is related to database connectivity.<\/p>\n

\t\t\t\tRest of story locked237 more words \u00b7 1 min
\n\t\tKeep reading<\/p>\n

\t\tStory continues \u00b7 1 min left<\/p>\n

Read the rest of this story \u2014 freeWelcome back.That email didn\u2019t go through.<\/p>\n

Reader emails keep local news free, with no paywall. You\u2019ll get our newsletter with the Valley\u2019s top stories Monday, Wednesday and Friday mornings, and that\u2019s all we use it for. Do it once and every story stays open.You left the newsletter, so stories past here need your email again. Rejoin and every story opens.We couldn\u2019t deliver to the address you gave. Use another one and every story opens.<\/p>\n

Unsubscribe anytime. Privacy policy<\/a><\/p>\n

PHP\u2019s maintainers said in a security advisory<\/a> that the two flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can let an attacker run code on a PHP-powered web server without logging in. They released updates Wednesday at 10 a.m. Eastern, as announced a day earlier. The updates include versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35.<\/p>\n

Governments elsewhere pulled websites offline over the same flaw before the updates were released, Reuters reported<\/a>. It said agencies in the Netherlands and Finland took sites offline, and France\u2019s Interior Ministry also took down local government administrative websites.<\/p>\n

The Cybersecurity and Infrastructure Security Agency urged organizations in an alert Wednesday to update immediately. It said those that cannot, or that still use PHP 8.1 or earlier, should take their PHP systems offline until they are fixed. The agency said it had not seen the flaws exploited when it published the alert, though Cloudflare\u2019s chief technology officer, Dane Knecht, said the web security company was seeing early attacks emerging, according to Reuters.<\/p>\n

PHP\u2019s advisory says versions 8.1 and older no longer receive updates from the project, though some vendors still provide fixes. The maintainers also published minimal patches for 7.4, 8.0 and 8.1 for people who build the software themselves.<\/p>\n

WordPress security company Wordfence said Wednesday that updating WordPress does not fix the flaws and that site owners must update and restart PHP.<\/p>\n

Council\u2019s calendar lists the next meeting as a special budget session at 5:30 p.m. Oct. 28.<\/p>\n","protected":false},"excerpt":{"rendered":"ALLENTOWN, Pa. \u2014 Allentown City Council\u2019s livestream went down Wednesday after an outage at its video provider, Granicus,…\n","protected":false},"author":2,"featured_media":311988,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[119,121,120],"class_list":["post-311987","post","type-post","status-publish","format-standard","has-post-thumbnail","category-allentown","tag-allentown","tag-allentown-headlines","tag-allentown-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/posts\/311987","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/comments?post=311987"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/posts\/311987\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/media\/311988"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/media?parent=311987"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/categories?post=311987"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/tags?post=311987"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}