Málaga and the Andalusian Health Service take web services offline after PHP flaw alerts

Málaga City Council halted certain municipal digital services as a precaution on 23 October after learning, through warnings from CCN-CERT and AndalucíaCERT, of a very high-severity vulnerability in PHP, according to a municipal statement reported by Europa Press. The cybersecurity bodies recommended updating immediately or temporarily taking the affected services offline.

According to the council, its cybersecurity department is making an inventory of PHP-based applications in order to migrate them to non-vulnerable versions; non-essential internet-facing services will remain isolated until they can be fixed and will be restored gradually as the patches are applied. The council has not specified which services are down.

The Andalusian Health Service (SAS) disabled its web portal on the night of Wednesday 21 October as a precaution following the CCN-CERT alert, 101TV reported. The SAS said that no critical systems or healthcare services had been affected. The UGT Andalucía union said the outage affects procedures such as transfer competitions, public job offers and job pools.

In Castilla-La Mancha, Albacete City Council temporarily suspended its official website and 13 other municipal portals, citing maintenance work, according to El Digital de Albacete. The council has not explicitly linked the suspension to the PHP vulnerabilities and is keeping its e-government offices running for urgent procedures.

None of these administrations has reported intrusions or data leaks; the disconnections are being presented as precautionary.