Resolved after 10 hours 26 minutes, on October 21, 2026.
As a proactive response to the PHP2SHELL vulnerability, which was made public on October 21, 2026, and in line with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC) MoodleCloud has begun taking sites offline. We will keep sites offline until patches for the vulnerability have been released. We are preparing a fuller response that addresses this vulnerability and our next steps. We want that response to be accurate and substantive, not reactive, so we are taking a short time to confirm the relevant facts internally before responding in full. We appreciate your patience.
Update timeline
- investigating Oct 21, 2026, 01:46 PM UTC
As a proactive response to the PHP2SHELL vulnerability, which was made public on October 21, 2026, and in line with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC) MoodleCloud has begun taking sites offline. We will keep sites offline until patches for the vulnerability have been released. We are preparing a fuller response that addresses this vulnerability and our next steps. We want that response to be accurate and substantive, not reactive, so we are taking a short time to confirm the relevant facts internally before responding in full. We appreciate your patience.
Your product runs on more than Moodle
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services