Nepal Rastra Bank Temporarily Shuts Website and Services Over Critical PHP Security Vulnerability
Nepal Rastra Bank has temporarily suspended its website and certain services after a serious security vulnerability was identified in PHP-based web technology globally. The central bank has urged banks, payment system operators, payment service providers, and remittance companies to strengthen their server security and monitoring. The shutdown will remain in place until necessary security measures are completed and services can be safely restored.
Nepal Rastra Bank (NRB) has temporarily suspended its website and certain services after a serious security vulnerability was identified in PHP-based web technology globally. The central bank said the temporary shutdown was implemented as a precautionary measure to protect its digital infrastructure and prevent potential security threats arising from the vulnerability.
Issuing an urgent notice, NRB said its website and related services have been taken offline temporarily in view of the critical security risk detected in PHP web technology. The bank acknowledged that the disruption could cause inconvenience to stakeholders in the banking and financial sector as well as the general public, and apologized for the inconvenience.
NRB has requested the public and stakeholders to rely on the bank’s official social media channels for essential notices and information related to the central bank during the period when its website and services remain unavailable. The bank said important updates will continue to be made available through its official social media platforms to ensure access to critical information.
The central bank has also appealed to all banks and financial institutions, payment system operators (PSOs), payment service providers (PSPs), and remittance companies to adopt necessary security precautions in response to the identified vulnerability. NRB has urged these institutions to strengthen the systems and infrastructure currently deployed on their servers and increase regular security monitoring to reduce potential cyber risks.
The appeal comes amid growing concerns over vulnerabilities in web-based systems that could expose digital services and critical financial infrastructure to cyberattacks. NRB has called on institutions under its regulatory purview to remain vigilant and take proactive measures to identify, mitigate, and monitor potential security threats affecting their digital platforms.
The central bank emphasized the need for heightened security awareness and continuous monitoring while the vulnerability is being addressed. Financial institutions and payment-sector companies have been encouraged to review their server-side systems, strengthen security controls, and maintain regular surveillance of their digital infrastructure.
The notice was issued by Nepal Rastra Bank on Kartik 6, 2083. The temporary suspension is expected to remain in place until the necessary security measures are completed and the affected services can be safely restored.