ICANN Restores Three Websites After Patching PHP Vulnerability
The organization briefly disabled the administrative sites to implement a security patch from the PHP Foundation.
Updated on Oct. 22, 2026 in Cybersecurity
Live Poll
Do you trust the organizations managing global internet identifiers to protect your data from software vulnerabilities?
ICANN has restored three administrative websites following a temporary shutdown to mitigate a vulnerability in PHP software. The organization successfully applied a patch released by the PHP Foundation to ensure system security.
Why it matters
The preventive measure was taken to protect infrastructure while ensuring that no ICANN systems were compromised. By addressing the security flaw immediately, the organization avoided potential negative impacts on its digital administrative presence.
ICANN temporarily disabled three administrative websites running on PHP software to apply a patch from the PHP Foundation. Two other administrative portals, the APS and TAMS, remained unaffected as they do not operate on PHP.
The players
ICANN
ICANN is a global non-profit organization formed in 1998 that manages the coordination of the internet's unique identifiers and naming systems.
PHP Foundation
The PHP Foundation is an organization responsible for maintaining and advancing the PHP programming language used widely in web development.
The details
The GNSO, the New gTLD Program 2026 Round, and the New gTLD Program 2012 Round websites were returned to service after testing the software fix. No systems were negatively affected by the security issue during the maintenance window.
Timeline
October 22, 2026: ICANN confirmed the restoration of the three affected websites.
The Tech Race
The move aligns with industry-standard responses to the PHP Foundation's emergency patch release protocols. This process marks a departure from legacy manual security updates, favoring automated patching to secure critical web infrastructure against modern exploits.
Users can once again access the New gTLD Program and GNSO administrative portals for application guidance and policy documentation. These sites now function with the latest security updates, ensuring a stable experience for applicants and stakeholders.
The takeaway
Maintaining up-to-date software is the most effective defense against widespread web vulnerabilities. Regularly checking for and applying official patches as soon as they are released protects both organizational data and user access.
What happens next
Emergency patches from the PHP Foundation are expected soon, likely requiring further infrastructure updates across the industry.
Further reading
For more on evolving digital infrastructure defense, visit the Cybersecurity section.
More information
Review the full requirements in the 2026 round applicant guidebook on the ICANN portal.
Live Poll
Do you trust the organizations managing global internet identifiers to protect your data from software vulnerabilities?
