The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Martin Stanislav <address@concealed>]

Hi Stefan & Pavel,

Web service https://monitor.eduroam.org/ remains unaccessible from Oct 21st 
around 12:39PM CEST. I agree, the outage is/was likely related to the PHP 
vulnerability. It's possible that web access can now be restored. I'd 
recommend Pavel to contact eduroam OT directly via email.

Kind regards,
Martin


On Fri, Oct 23, 2026 at 09:12:36AM +0000, Stefan Paetow wrote:
> Hi Pavel,
> 
> I think this is due to the PHP vulnerability that was widely reported the 
> day before yesterday. I know CAT was fixed and brought back online 
> yesterday.
> 
> With kind regards
> 
> Stefan Paetow
> Federated Roaming Technical Specialist
> eduroam(UK), Jisc – 20 years of free Wi-Fi for the UK R&E sector
> 
> email/teams: address@concealed
> gpg: 0x3FCE5142
> 
> For eduroam support, please contact the eduroam team via address@concealed 
> and mark it for eduroam’s attention.
> I am not available on Mondays and Fridays between 12:00 and 15:00 London 
> time (UTC in winter, UTC+0100 in summer).
> 
> Note: I don’t expect a reply outside of your working hours, since I work 
> internationally with colleagues in different nationalities with different 
> religions, customs, and holidays. Reply when it is convenient for you.
> 
> Jisc is a registered charity (in England and Wales under charity number 
> 1149740; in Scotland under charity number SC053607) and a company limited 
> by guarantee registered in England under company number 05747339, VAT 
> number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, 
> Bristol, BS1 6NB. T 0203 697 5800.
> 
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company 
> limited by guarantee which is registered in England under company number 
> 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall 
> Lane, Bristol, BS1 6NB. T 0203 697 5800.
> 
> For more details on how Jisc handles your data see our privacy notice here: 
> https://www.jisc.ac.uk/website/privacy-notice
> 
> 
> On 23/10/2026, 08:55, "address@concealed" 
> <address@concealed> wrote:
> 
> Hi,
> 
> I am sorry if this has already been reported or if I missed a message
> regarding this issue.
> 
> Since yesterday, we have noticed that https://monitor.eduroam.org has
> been down. We use this site to download the eduroam KML file for our
> federation (.si).
> 
> Is the page still down due to the recent PHP vulnerabilities?
> 
> Best regards,
> Pavel
> 
> --
> --
> Pavel Sipos, Arnes <address@concealed<mailto:address@concealed>>
> ARNES, p.p. 7, SI-1001 Ljubljana, Slovenia
> T: +386 1 479 88 00
> W: www.arnes.si, aai.arnes.si
> 
> 
> To unsubscribe, send this message: 
> mailto:address@concealed?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users