Current answer
Moodle US experienced a critical incident: PHP vulnerability. ServiceAlert observed recovery on Oct 22, 2026.
Looking for an update now? Check the current status, or follow Moodle US for future changes.
Incident Lifecycle
Affected Components
Shared Moodle Hosting
unHosting Control Panel
eLearning Experts Moodle Hosting
unHosting Sites on AWS Cloud Infrastructure
Incident Timeline
Monitoring
Patches have been issued to address this vulnerability. We are applying these patches to sites and will bring sites online as soon as they have been patched and verified. We do not have a clear timeframe of when the full set of patches will be completed, but we are working quickly and carefully to update your site and get it back online.
If you would like more information on this situation, please visit the CERT-EU Security Advisory page for an overview on the source of this vulnerability affecting sites around the world. https://cert.europa.eu/publications/security-advisories/2026-018
If you would like more information on this situation, please visit the CERT-EU Security Advisory page for an overview on the source of this vulnerability affecting sites around the world. https://cert.europa.eu/publications/security-advisories/2026-018
Oct 21, 2026 at 10:05 PM UTC
Identified
We are continuing to work on a fix for this issue.
Oct 21, 2026 at 8:13 PM UTC
Identified
As a proactive response to the PHP2SHELL vulnerability, which was made public on October 21, 2026, and in line with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC), Moodle has begun taking sites offline. We will keep sites offline and will restore access once we have applied and verified the recently released, necessary security patches.
We encourage self-hosted site holders to notify the individual(s) responsible for updating PHP for their sites and to create a plan to update your PHP with the released security patches. We are preparing a fuller response that addresses this vulnerability and the steps we are taking. We want that update to be accurate and substantive, not reactive, so we are taking a short time to confirm the relevant facts internally before responding in full.
We encourage self-hosted site holders to notify the individual(s) responsible for updating PHP for their sites and to create a plan to update your PHP with the released security patches. We are preparing a fuller response that addresses this vulnerability and the steps we are taking. We want that update to be accurate and substantive, not reactive, so we are taking a short time to confirm the relevant facts internally before responding in full.
Oct 21, 2026 at 3:47 PM UTC
Was your business affected by this Moodle US outage?
Follow Moodle US and route available status alerts to email or a team channel.