Starting November 1, 2026, it will no longer be possible in Qualtrics to create new Legacy Results-Reports or custom pages for either existing or new survey projects. Survey projects created starting November 1, 2026 will default to the current Results Dashboards, with no option to revert to Legacy Results-Reports. This is a vendor-initiated change.
Refer to the IT News article for details and recommendations.
Vulnerable Software | Google Brotli C Decoder Platform(s) | Anything that ships or links Brotli 1.0.3 through 1.2.0 may be affected Vulnerability Type | CVSSv4: 9.2 Local or Remote Exploitation | Remote Customer Action – Certified Desktop (Windows/macOS) | .NET will be patched centrally. Other instances of the vulnerability, such as Node.js, Python HTTP clients, and other software will need to be patched by the endpoint owner. Customer Action – Managed Server | Customer responsibility to patch Customer Action – Unmanaged | Customer responsibility to patch
OVERVIEW: Security patches have been released for this critical vulnerability, rated CVSS v4.0 Score: 9.2 / Critical. The CVE allows unauthenticated RCE (remote code execution). Many projects ship a private copy of the C decoder instead of using the system's library. A distribution update doesn't fix those: each project has to update its copy. A copy is patched if it includes the new BLOCK_SWITCH error code.
RECOMMENDATIONS: Apply patches as soon as possible.
SYSTEMS AFFECTED: Any system running Node.js, Python, or anything else built on Google's C decoder.
Vulnerable Software | PHP programming language Platform(s) | PHP branches, 8.2 through 8.5 Vulnerability Type | CVSS v9.2 Local or Remote Exploitation | Remote Customer Action – Certified Desktop (Windows/macOS) | Apply patch as soon as possible“This is NOT centrally patched" Customer Action – Managed Server | Apply patch as soon as possible Customer Action – Unmanaged | Apply patch as soon as possible Custom Development Services | Websites and web applications currently supported and maintained by Custom Development in Enterprise Services of IT at Cornell will be updated. If you own a PHP based websites or applications and are not using Custom Development's services, you should make sure the PHP frameworks are updated as soon as possible
OVERVIEW: PHP will ship an out-of-cycle security release at 10:00 EST today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described. Both CVEs allow RCE (remote code execution).
RECOMMENDATIONS: Apply patch as soon as possible. Expected release date and time: Oct 21, 2026 - 10:00am
Fall Creek Gorge Trail Closure - Stewart Ave Bridge to 118
Closure Extended Notice - A section of the Fall Creek gorge trail will be closed between the Stewart Avenue bridge and 118 McGraw. This closure is required for work at the Stewart Avenue Bridge project.
Fencing will be placed across the gorge trail. Please take alternate routes.
This section of gorge trail is anticipated to be reopened by the end of November 2026.
Closure Extended Notice - A section of the Fall Creek gorge trail will be closed between the Stewart Avenue bridge and 118 McGraw. This closure is required for work at the Stewart Avenue Bridge project.
Fencing will be placed across the gorge trail. Please take alternate routes.
This section of gorge trail is anticipated to be reopened by the end of November 2026.
Special Condition
Hoy Road Garage North Entrance Closed 10/19-11/6/2026
The Campus Road entrance to the Hoy Road Parking Garage will be closed October 19 through November 6, 2026, for stair replacement north of parking garage. Please use the Hoy Road entrance to access all levels of the garage. Delays due to weather and supply chain issues may extend the closure dates.
Please use caution, watch for pedestrians, and comply with posted speed limits when traveling through the parking garage.
The Campus Road entrance to the Hoy Road Parking Garage will be closed October 19 through November 6, 2026, for stair replacement north of parking garage. Please use the Hoy Road entrance to access all levels of the garage. Delays due to weather and supply chain issues may extend the closure dates.
Please use caution, watch for pedestrians, and comply with posted speed limits when traveling through the parking garage.
Closure Extended Notice - A section of the Fall Creek gorge trail will be closed between the Stewart Avenue bridge and 118 McGraw. This closure is required for work at the Stewart Avenue Bridge project.
Fencing will be placed across the gorge trail. Please take alternate routes.
This section of gorge trail is anticipated to be reopened by the end of November 2026.