Ongoing since 12:44 AM UTC.
As a precautionary measure in response to the zero day PHP2SHELL vulnerability, which was made public on October 21, 2026, Moodle HQ made the decision to take your site(s) offline. You may have noticed that we also took our public facing sites offline as well. This was an action we did not take lightly, but was made out of an abundance of caution to protect your site, data, and users and inline with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC), which were issued once it became clear that there were no effective workarounds to mitigate these vulnerabilities. Patches to address this vulnerability were released around mid-day US Eastern time. After validating the patches, we began rolling out the patches around 13:00 EST, and started to bring client sites back online. We have completed this work and can verify that your site is back online and has been patched for this vulnerability. We will follow-up in the coming days with a more comprehensive incident summary. In the meantime, please do not hesitate to reach out to our support team through the customer portal. The MoodleCloud Team
Update timeline
- investigating Oct 22, 2026, 12:44 AM UTC
As a precautionary measure in response to the zero day PHP2SHELL vulnerability, which was made public on October 21, 2026, Moodle HQ made the decision to take your site(s) offline. You may have noticed that we also took our public facing sites offline as well. This was an action we did not take lightly, but was made out of an abundance of caution to protect your site, data, and users and inline with the recommendations from CERT-EU and the Australian Cyber Security Centre (ACSC), which were issued once it became clear that there were no effective workarounds to mitigate these vulnerabilities. Patches to address this vulnerability were released around mid-day US Eastern time. After validating the patches, we began rolling out the patches around 13:00 EST, and started to bring client sites back online. We have completed this work and can verify that your site is back online and has been patched for this vulnerability. We will follow-up in the coming days with a more comprehensive incident summary. In the meantime, please do not hesitate to reach out to our support team through the customer portal. The MoodleCloud Team
Your product runs on more than Moodle
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services