All customer sites are being taken offline on October 21, 2026
What is Happening:
Open LMS is taking all customer sites offline at about 10:00 EST on October 21, 2026
Why this is Happening:
Two critical zero-day exploits in PHP have been discovered and are actively being exploited.
There is no mitigation at the time of this posting. Given the serious nature of these exploits, the only way to protect sites is to bring them offline.
This is not an Open LMS issue; it affects 40% of the internet globally.
What is Next:
The PHP organization is planning on releasing patches today. As soon as those patches are available, we will apply them and bring sites back online.
We will post updates here as soon as we have them. Thank you for your patience.
Last updated: October 21, 2026 at 9:35 a.m. ET