This incident has been resolved after confirming any potentially impacted servers have been patched and there are no outstanding issues or vulnerabilities. Volunteer applications have been restored.
Posted Oct 22, 2026 - 21:13 EDT
Monitoring
Recent PHP vulnerabilities are currently being monitored. Sunlight and Sunlight Health were never affected. CasaManager's case management solution including CasaConnect and the Volunteer Portal were not impacted. The only service which may be impacted are some Volunteer Applications, which have proactively been deactivated while we await confirmation from our hosting provider that they are updated to the latest version of PHP. No action is needed and all other services are running normally.