Is Moodle down?

As a precautionary measure in response to the zero day PHP2SHELL vulnerability, which was made public on October 21, 2026, Moodle HQ made the decision to take your site(s) offline. You may have noticed that we also took our public facing sites offline as well. This was an action we did not take lightly, but was made out of an abundance of caution to protect your site, data, and users and inline with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC), which were issued once it became clear that there were no effective workarounds to mitigate these vulnerabilities. Patches to address this vulnerability were released around mid-day US Eastern time. After validating the patches, we began rolling out the patches around 13:00 EST, and started to bring client sites back online. We have completed this work and can verify that your site is back online and has been patched for this vulnerability.  We will follow-up in the coming days with a more comprehensive incident summary. In the meantime, please do not hesitate to reach out to our support team through the customer portal.  The MoodleCloud Team

As a proactive response to the PHP2SHELL vulnerability, which was made public on October 21, 2026, and in line with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC), MoodleCloud has begun taking sites offline. We will keep sites offline and will restore access once we have applied and verified the recently released, necessary security patches. We are preparing a fuller response that addresses this vulnerability and the steps we are taking. We want that update to be accurate and substantive, not reactive, so we are taking a short time to confirm the relevant facts internally before responding in full.