Spanish regional authorities restrict web services following critical PHP vulnerability

Public administrations in Spain, including the University of Granada and the regional government of Castilla-La Mancha, have implemented security measures to restrict or suspend web services. These actions follow a critical global alert issued by the National Cryptologic Center (CCN-CERT) regarding vulnerabilities in PHP, a widely used programming language.

The vulnerability could allow unauthenticated remote attackers to execute code and take control of web servers. In response, the University of Granada has temporarily restricted access to several pages, including the General Secretariat, the Rectorate, and dining services. Similarly, the Digital Transformation Agency of Castilla-La Mancha is progressively shutting down affected services to prevent exposure to potential attacks while working on necessary security updates.

The alert has also impacted other public services and institutions, such as the Andalusian Health Service and the Rovira i Virgili University. Authorities are following recommendations to update affected applications immediately or suspend non-essential services until security patches are verified.