Ongoing Maintenance following PHP Security Vulnerabilities October 21
Update - Thank you for staying patient with us.

Other than a small group of sites in the APAC region, all sites are now patched and back online. Our engineers are focusing on this last group of remaining sites to bring them back online. Further updates will follow as work completes.

Please note: Once your site is back online, it is fully patched and ready to use.
Oct 22, 2026 - 06:13 UTC
Update - Thank you for your continued patience.

Almost all sites in the APAC region are now back online, and we are working to restore the remaining few. We are still applying patches to some sites in our EU and US regions and will provide further updates as progress is made.

Please note: Once your site is back online, it is fully patched and ready to use.
Oct 22, 2026 - 03:42 UTC
Monitoring - Apologies- There is a subset of clients who are not fully restored. Our teams are continuing to push through them and we appreciate your patience.
Oct 21, 2026 - 23:20 UTC
Uptime over the past 90 days. View historical uptime.
Open LMS - Asia Pacific Degraded Performance
Open LMS - Europe, Middle East & Africa Operational
Open LMS - Latin America Operational
Open LMS - North America Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Oct 22, 2026

Unresolved incident: Ongoing Maintenance following PHP Security Vulnerabilities October 21.

Oct 21, 2026

PHP Security Vulnerabilities October 21
Resolved - There is a small subset of clients who are not fully restored, yet.
Oct 21, 22:53 UTC
Update - The overwhelming majority of customer sites are now fully patched and back online. We are actively working on the remaining sites and expect to restore them within the next few hours.

Thank you for your patience and understanding throughout today’s event.
Oct 21, 22:40 UTC
Monitoring - Sites are coming back online.

PHP security patches are now available, and we are installing them across our hosting environment. We have begun restoring sites as each one is fully patched, and we expect restoration to continue over the next several hours.
What this means for you

If your site is back online, it has been patched against both PHP vulnerabilities.
If your site is still offline, it is in the queue. You don’t need to do anything. We’ll restore it as soon as its patches are installed.

We’ll keep posting updates here as restoration progresses. Thank you for your continued patience.
Oct 21, 20:01 UTC
Update - Thank you for your patience during this global security event. Patches for the PHP issues are beginning to be received, although there are several packages for each of the many versions of PHP that we run. We are actively updating all sites with the patches as they are ready but will not be restoring a service until that site is fully patched. We don't have a clear timeframe on when the full set of patches will be completed, but we are actively moving towards the goal. We will continue to provide updates as we make progress.
Oct 21, 18:02 UTC
Update - Open LMS has taken all customer sites offline as a preventative measure.

Why: Two critical zero-day vulnerabilities in PHP have been discovered and are being actively exploited. No mitigation is currently available, so taking sites offline is the only way to fully protect them. These vulnerabilities affect PHP-based websites worldwide and are not specific to Open LMS.

What's next: The PHP project expects to release patches today. As soon as they are available, we will apply them and bring sites back online.

openlms.zendesk.com/hc/en-us/articles/31214374861084
Oct 21, 15:31 UTC
Identified - What is happening: Open LMS is taking all customer sites offline within the next few minutes.

Why: Two critical zero-day vulnerabilities in PHP have been discovered and are being actively exploited. No mitigation is currently available, so taking sites offline is the only way to fully protect them. These vulnerabilities affect PHP-based websites worldwide and are not specific to Open LMS.

What's next: The PHP project expects to release patches today. As soon as they are available, we will apply them and bring sites back online.

openlms.zendesk.com/hc/en-us/articles/31214374861084
Oct 21, 13:41 UTC

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Oct 12, 2026

No incidents reported.

Oct 11, 2026

No incidents reported.

Oct 10, 2026

No incidents reported.

Oct 9, 2026

No incidents reported.

Oct 8, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage