Financial Information Services

<div>CVE-2026-63030 + CVE-2026-60137 · Pre-auth WordPress Core RCE chain used as initial access to deploy Agent-TCP, a cross-platform Go RAT, across Windows &amp; Linux — combined with mass IoT compromise across 14 CPU architectures, fileless execution via MemfdCreate, and DLL injection on Windows.<br><br>Affected: WordPress 6.9.0–7.0.1. Fixed: 7.0.2 / 6.9.5.

<div>On August 5th, from 4am to 7am, we are upgrading routers and switches at the Rhodes and CCC Serverfarms, as well as routers at the Rhodes and CCC Nodes. <br><br>Wired connectivity will be impacted in the Serverfarm locations intermittently during the upgrades.<br><br><strong>The devices sfc1-qfx and sfr1-qfx are out of scope for this upgrade. </strong><br><br>Wired and wireless network connectivity will be impacted in the Rhodes/CCC nodes intermittently during the upgrades.

<div>In August, Zoom will be making a significant UI update to the Zoom <strong>web</strong> portal. This will be a mandatory change with no option to revert to the old UI.&nbsp;<br><br>On July 23, a preview option will allow meeting participants and organizers to familiarize themselves with the new UI. Once enabled, a "Try New Experience" toggle will appear in the upper right of the Cornell Zoom web portal.

<div>On Saturday, July 25, between 7 and 8 am EDT, Endpoint Infrastructure &amp; Engineering will reconfigure downloads.cornell.edu to utilize Identity Management's new ACME Proxy service for managing its security certificate.&nbsp;<br><br>No downtime is expected, but there may be a momentary interruption as the certificate is updated.</div>

<div>Kuali Financial System (KFS) and eShop will be down for a patch release this Sunday, July 26, from 6am to 12noon EST.</div>

<div>Guest users of SharePoint receive an error when trying to access shared documents stored in Cornell Ithaca's SharePoint. This may include external users such as WCM, or any other external user. <br>&nbsp;<br>Guest file access in Microsoft Teams, which uses SharePoint for file storage, is also affected. Chat continues to work for affected users. The file access issue is only impacting external users who were added as a guest directly to a non-shared team.

<div>Users are unable to log into PeopleSoft Campus Solutions at this time, affecting Student Center, Faculty Center, and all PS Admin. Cornell staff are working on the issue.&nbsp;</div>

<div>PeopleSoft Student Center, Faculty Center, Student Essentials, ePay, Student Admissions, Contributor Relations, Financial Aid, Student Financials, Student Records, Student Employment (PSES) will be unavailable on Saturday, July 18th 2026 at 5am until approximately 10am (ET) for regularly scheduled server maintenance.&nbsp;<br><br>This maintenance may not require the fully scheduled time.</div>

<div>Turnitin and Gradescope services will have scheduled database maintenance on Saturday July 18th from 11:00 am to 5:00 pm EDT.

<div>KFS will not be available starting at 5pm (ET) until approximately midnight on Tuesday, July 21, 2026 in support of additional batch processing necessary for Fiscal Year End 2026.</div>