OpenClassrooms incident
On 21 October, two critical vulnerabilities affecting PHP (collectively known as “php2shell”) were publicly disclosed. Current Status & Timeline: Exposure: Certain platform components were running affected PHP versions. Mitigation: Temporary mitigations were applied earlier in the day on 21 October to block potential exploit vectors. Patching: Deployment of the official PHP security patch was completed across all systems on 21 October. Customer Impact: We have found no evidence of exploitation
Resolved on October 26, 2026, affecting WEBSITE.
On 21 October, two critical vulnerabilities affecting PHP (collectively known as “php2shell”) were publicly disclosed. Current Status & Timeline: Exposure: Certain platform components were running affected PHP versions. Mitigation: Temporary mitigations were applied earlier in the day on 21 October to block potential exploit vectors. Patching: Deployment of the official PHP security patch was completed across all systems on 21 October. Customer Impact: We have found no evidence of exploitation, unauthorized access, or impact on customer data. We will update this page if any material findings emerge.
Affected components
Update timeline
- resolved Oct 26, 2026, 07:16 PM UTC
On 21 October, two critical vulnerabilities affecting PHP (collectively known as “php2shell”) were publicly disclosed. Current Status & Timeline: Exposure: Certain platform components were running affected PHP versions. Mitigation: Temporary mitigations were applied earlier in the day on 21 October to block potential exploit vectors. Patching: Deployment of the official PHP security patch was completed across all systems on 21 October. Customer Impact: We have found no evidence of exploitation, unauthorized access, or impact on customer data. We will update this page if any material findings emerge.
Your product runs on more than OpenClassrooms
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services