Large-scale emergency maintenance operations originating in Kansai have been carried out one after another, and web services including those of Sakura Internet have been suspended or had access restricted because of a critical PHP vulnerability. Work to apply security patches is continuing at various locations.
A serious vulnerability has been found in PHP, a programming language widely used on web servers around the world, allowing programs inside a server to be executed remotely without authentication. As companies and local governments in Kansai work to apply patches and verify security as an emergency response, their websites have been suspended or had display functions restricted one after another.
Sakura Internet and XServer, both based in Osaka, have temporarily suspended or halted their database administration screens and account administration screens, respectively. Zenlogic has also carried out emergency maintenance as part of its security response, affecting IT infrastructure across Kansai.
The official websites of four Kansai private railway companies have stopped displaying train operation information or switched to maintenance screens, making it impossible to check delays or search timetables through browsers. Users have been directed to check alternative sources, including electronic station signs, official apps and social media.
The impact has also spread to government and daily-life infrastructure. The Osaka Prefectural Government has suspended its search service for residents. Access to Osaka Gas’s “My Osaka Gas” has been restricted, while the official website of Ryukoku University in Kyoto has also been suspended, resulting in temporary service outages at various locations.