HAWKI 1

[Down] Due to a vulnerability in PHP, various services remain offline

Thu, 22 Oct 2026 15:56:00 +0200

Hello,

Due to the severe security vulnerability in PHP, some of HM’s IT services must continue to remain offline. The following centrally operated systems are currently affected:

HAWKI 1 (the old one; the new HAWKI 1 2 is available)
LimeSurvey, old installation
Primuss Zahlenportal (Update Oct 22, 14:30: back online)
PCS Door Management

We are working hard to update the systems and will keep you informed of any updates here.

Kind regards,

Your HM IT

[Resolved] Security vulnerability PHP2Shell: UCware, Moodle, Mahara, and LimeSurvey temporarily offline

Wed, 21 Oct 2026 14:00:00 +0200

+++ UPDATE 2026-10-21 17:14 +++

Because a vulnerability has also been found in the updated version of PHP, the systems must remain shut down.

Unfortunately, eduVPN is also affected by the shutdown.

Dear students, dear colleagues,

Today, a serious security vulnerability in the PHP programming language was disclosed, referred to as “PHP2Shell.” Many web applications worldwide are based on PHP, including several HM systems. Affected among others are UCware, Moodle, Mahara, and LimeSurvey.

Please note that, as a result, telephony when working from home and from mobile phones via the UCware app is not possible.

What does this mean?

Through the vulnerability, attackers could remotely execute programs on the affected servers. They could thereby take control of the systems and read or modify data.

What is HM doing?

To protect you and your data, we have proactively taken the affected systems offline. They will therefore be unavailable until further notice. As soon as the security updates are available and have been applied, we will bring the systems back online.

Where can I find current information?

You can find the current status at any time at https://status.hm.edu.

An easy-to-understand explanation of the vulnerability is provided by the association Deutschland sicher im Netz:

https://www.sicher-im-netz.de/php2shell-kritische-sicherheitsluecken-gefaehrden-webseiten-und-onlineshops/

We are aware that the outage restricts teaching, studies, and administration. We are working flat out to make the systems available again as quickly as possible and ask for your understanding.

Kind regards

Your HM IT

[Resolved] Minimal IT operations due to a power shutdown

Wed, 05 Aug 2026 16:00:00 +0200

HM IT is currently operating in minimal IT mode due to the planned power shutdown by Stadtwerke München during the period

from Wednesday, 05.08.26 at 4 p.m. to Thursday, 06.08.26 at approx. 3 p.m.

Minimal operation includes the following services:

Authentication with university account & MFA (and thus access to external services such as Zoom, Outlook, BayernCollab & OneDrive)
Telephony with UCware
Door access with Salto (via token) and Zeus
DHCP and DNS
eduVPN
Desigo
Primuss

Note: During the power-off times, no IT operations will be possible at all in buildings B, E, R, and X (not even minimal operations).

At the end of September, the same restrictions will occur again. We will inform you again once the exact period has been set.

[Resolved] Resolved: Air conditioning failure in Room R, server shutdown

Sat, 27 Jun 2026 19:02:00 +0200

Update 29.06.226 · 16:11 hrs

The services are now available again as usual.

Update 29.06.26 · 08:45 hrs

The air conditioning was put back into operation by Building Management.

The affected services are currently being restored step by step. Please note that there may still be intermittent limitations over the course of the day.

Original notice 27.06.26 · 19:02 hrs

The failure of the air conditioning in the R Building unfortunately forces us to shut down the majority of our IT services. Please also expect restrictions and performance degradation on the other services due to reduced system performance.

Together with Building Management, we are working intensively on a solution.

We will keep you informed here about further developments.

HM Central IT regrets the inconvenience caused!