Moodle is currently experiencing a major incident, which began 2h ago. The vendor's full update timeline is below.
Update timeline
- investigating Oct 21, 2026, 01:46 PM UTC
As a proactive response to the PHP2SHELL vulnerability, which was made public on October 21, 2026, and in line with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC) MoodleCloud has begun taking sites offline. We will keep sites offline until patches for the vulnerability have been released. We are preparing a fuller response that addresses this vulnerability and our next steps. We want that response to be accurate and substantive, not reactive, so we are taking a short time to confirm the relevant facts internally before responding in full. We appreciate your patience.