Is LMS365 down?

**Published:** October 23, 2026 **Status:** Resolved **Customer assurance (primary):** Learn365, Perform365, and Engage365 do not use PHP and were not impacted by these vulnerabilities. Zensai has completed remediation activities related to two disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting certain unsupported PHP versions used within parts of our public website infrastructure. The affected systems were limited to public-facing marketing websites and related web infrastructure. The affected environment was upgraded to supported and patched PHP releases, and additional validation was performed to identify any indicators of compromise or security issues. **As a result:** - No customer data was affected. - No interruption to customer services occurred. - Authentication and application services were unaffected. - Learn365, Perform365, and Engage365 continued to operate normally throughout the remediation process. **Findings** Our investigation found: - No evidence of exploitation. - No evidence of unauthorized access. - No evidence of malicious code execution. - No evidence of website tampering. - No impact to customer products, services, or data. For full details, please refer to the Trust Center advisory: https://trustcenter.zensai.com/hc/en-us/articles/40117544567965-Security-advisory-PHP-vulnerabilities-affecting-public-website-infrastructure

We have identified the issue with the Course Notifications Panel. Some course notifications can't be managed at the course level.

A fix has been deployed to address the issue where course notification options were missing at the course level. We are monitoring the results to ensure the issue is fully resolved.

The fix has been deployed and the issue where course notification options were missing at the course level is now resolved. If you observe any further issues, please contact the Zensai Support team.

We are currently experiencing an issue with course completions, mostly regarding courses with SCORM packages, where the package/course will be completed, but the course will remain as In-Progress with a 100% completion percentage. The issue has been identified and a hotfix will be released.

A fix has been successfully deployed to address the issue affecting SCORM course completions. Following the deployment, SCORM completion behavior has been restored to its expected state, and courses should now correctly reflect the learner’s completion status instead of remaining In Progress after successful completion. The issue is considered resolved, and SCORM course completion should now function as expected across the affected environments.

We have identified an issue affecting email notifications for customers using the legacy Perform & Engage (Weekly10) notification configuration. Our investigation found that Amazon Web Services (AWS), which supports this legacy email infrastructure, flagged an issue with the associated account and temporarily paused email sending from this service. As a result, some notification emails sent through the legacy configuration may not be delivered. Customers using the default notification sender ([email protected]) are not affected. As a mitigation, we are proactively migrating affected organizations from the legacy configuration to the default notification sender and notifying impacted administrators of the sender address change. Our teams are actively working to complete these migrations and minimize further impact. We will provide further updates as needed.

All affected customers have now been successfully migrated to Azure Communication Services and have been informed of the change. Email notification delivery has been restored for the impacted organizations, and no further action is required from customers. If you have any questions or experience any further issues, you can always create a support ticket through our Help Center.