Dear iPath Users,

Over the past 24 hours, the iPath network was temporarily taken offline to perform urgent, mandatory infrastructure and security upgrades.

Why Was Maintenance Necessary?

Earlier this week, cybersecurity agencies and the PHP Foundation disclosed critical, wide-reaching zero-day vulnerabilities in the PHP runtime engine—specifically CVE-2026-109618 and CVE-2026-109619 (collectively dubbed "PHP2Shell"). These vulnerabilities allow unauthenticated remote execution at the server level, posing an immediate risk to systems running legacy PHP environments.

To safeguard our database, user records, and telepathology case data, our team executed an emergency migration to transition the iPath platform to a modernized, fully secured server environment running PHP 8.5.

Current Status

Web Portal: Online and fully functional. You can sign in, review cases, browse medical imaging, and create entries directly through the web interface as normal.

Email Ingestion & Notifications (Temporary Limitation):
The automatic email processing service (importing case files received via email and sending automated email notifications) is temporarily disabled while we finish adapting the mail services to the new server architecture. Mail read and write capabilities will be restored over the next few days.

In the interim, please perform all case submissions and review communications directly through the website portal.

We sincerely apologize for the short notice, the downtime, and any disruption this caused to your clinical and diagnostic workflows. Protecting the integrity and confidentiality of your data is our highest priority.

Thank you for your patience and understanding.

Kurt Brauchli