# Fact: Organisations that cannot update immediately, or that run PHP 8.1 or older, shou

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Organisations that cannot update immediately, or that run PHP 8.1 or older, should take PHP-based systems offline Who says it, its status (confirmed), its sources, and its timeline from publication to this site.

Fact · advice · confirmed

# Organisations that cannot update immediately, or that run PHP 8.1 or older, should take PHP-based systems offline

**Who says it:** CISA · **Sources:** [CISA](../../sources/cisa-alert-php-20261021/index.html)

## Fact-check

**A6** Established●●●●●● · Advice · verdict: **holds**

CISA's alert says organisations that cannot update immediately, or that use PHP 8.1 or earlier unsupported versions, should take PHP-based systems offline until patched or updated. The party's own record carries it.

| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| [cisa-alert-php-20261021](../../sources/cisa-alert-php-20261021/index.html) | carries | *Organizations that cannot update immediately, or that continue to use PHP 8.1 or earlier unsupported versions, should take PHP-based systems offline* | 7bf853872a073bde |

Open tickets: [Finding-88](../../factcheck/index.html#Finding-88).

Graded in Run-1, resting on captures up to 2026-10-22 08:13 UTC. The scale is on [the fact-check page](../../factcheck/index.html#ladder).

## This fact over time
- 2026-10-21CISA publishes [Critical Vulnerabilities in PHP Require Immediate Patching](../../sources/cisa-alert-php-20261021/index.html)
- 2026-10-22 08:13 UTCSaved into the evidence vault: CISA
- 2026-10-22Enters this site as confirmed in v0.1.0 (reconstructed from git)

Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.

## What it rests on

## Where this fact appears

In the briefings for:
CCaseyWebsite ownerTTaylorProject or programme managerJJordanBoard member or executiveSSamSecurity leadRRowanJournalistRRobinCISOAAveryCTOMMorganData protection officerJJamieHead of AppSecRRileyCommunications team
And on [every claim](../../claims/index.html#offline-cisa).

## Every version of this fact
v1 · site v0.1.0 · 22 October 2026 · confirmed
```
Organisations that cannot update immediately, or that run PHP 8.1 or older, should take PHP-based systems offline
Who says it: CISA
Status: confirmed
Topic: advice
Sources: cisa-alert-php-20261021
```


---
site v0.8.0 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/facts/offline-cisa/index.html