Security update: Temporary restriction on GovCMS origin access

Scheduled Maintenance Report for GovCMS

Update

PaaS Customers you will need to submit a Service Desk ticket to inform GovCMS of your update plans ASAP. If we haven’t heard from you, from 9:30 AEDT, GovCMS will need to exercise step in rights and update on your behalf.
Posted Oct 22, 2026 - 07:44 AEDT

Update

SaaS bulk deployments are underway – at this stage, we are anticipating the platform will be available for contented editing from 1030 AM AEDT. Stay tuned for more updates over the next couple of hours.
Posted Oct 22, 2026 - 06:26 AEDT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 21, 2026 - 19:00 AEDT

Scheduled

Who this affects: GovCMS SaaS & PaaS Community

Advice:
GovCMS have been actively monitoring development and coordinating technical resources to ensure readiness to assess and the PHP vulnerability announced today. Despite a significant amount of work done today by GovCMS to implement further protections we cannot guarantee 100% safety therefore we are heeding advice from cyber.gov.au and other sources to disconnect the platform from the internet.

We are taking urgent protective action to mitigate the critical PHP vulnerabilities by temporarily disabling direct access to the GovCMS origin environment. This restriction helps protect customer websites while we address the vulnerabilities. Access will be restored once the threat has been resolved and it is safe to do so.

Sites will serve web content to the public though Akamai overnight though some sites and lesser visited pages may degrade if not cached. You will be unable to login to your websites overnight.

We will be assessing the CVE when it drops at 1am AEDT Thursday 22 October 2026. We are aiming to be back up and available for content publishing mode by 9am. We will communicate status at 7am if we believe we will not achieve a 9am restoration. If we can bring the platform back online earlier than 9am, we will.

We understand this may disrupt your work and appreciate your patience
Posted Oct 21, 2026 - 18:58 AEDT
This scheduled maintenance affects: GovCMS Projects (Individual websites).