Resolved on October 23, 2026.
**Published:** October 23, 2026 **Status:** Resolved **Customer assurance (primary):** Learn365, Perform365, and Engage365 do not use PHP and were not impacted by these vulnerabilities. Zensai has completed remediation activities related to two disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting certain unsupported PHP versions used within parts of our public website infrastructure. The affected systems were limited to public-facing marketing websites and related web infrastructure. The affected environment was upgraded to supported and patched PHP releases, and additional validation was performed to identify any indicators of compromise or security issues. **As a result:** - No customer data was affected. - No interruption to customer services occurred. - Authentication and application services were unaffected. - Learn365, Perform365, and Engage365 continued to operate normally throughout the remediation process. **Findings** Our investigation found: - No evidence of exploitation. - No evidence of unauthorized access. - No evidence of malicious code execution. - No evidence of website tampering. - No impact to customer products, services, or data. For full details, please refer to the Trust Center advisory: https://trustcenter.zensai.com/hc/en-us/articles/40117544567965-Security-advisory-PHP-vulnerabilities-affecting-public-website-infrastructure
Update timeline
- resolved Oct 23, 2026, 01:33 PM UTC
**Published:** October 23, 2026 **Status:** Resolved **Customer assurance (primary):** Learn365, Perform365, and Engage365 do not use PHP and were not impacted by these vulnerabilities. Zensai has completed remediation activities related to two disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting certain unsupported PHP versions used within parts of our public website infrastructure. The affected systems were limited to public-facing marketing websites and related web infrastructure. The affected environment was upgraded to supported and patched PHP releases, and additional validation was performed to identify any indicators of compromise or security issues. **As a result:** - No customer data was affected. - No interruption to customer services occurred. - Authentication and application services were unaffected. - Learn365, Perform365, and Engage365 continued to operate normally throughout the remediation process. **Findings** Our investigation found: - No evidence of exploitation. - No evidence of unauthorized access. - No evidence of malicious code execution. - No evidence of website tampering. - No impact to customer products, services, or data. For full details, please refer to the Trust Center advisory: https://trustcenter.zensai.com/hc/en-us/articles/40117544567965-Security-advisory-PHP-vulnerabilities-affecting-public-website-infrastructure
Your product runs on more than LMS365
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services