Security issue PHP

The fix has been fully implemented and as of 21-10-2026 23:25 CEST the SaaS-environments have been back online.

The implementation of the fix for the PHP-problem is still ongoing. We expect the SaaS-environments will be available again by tomorrow morning.

In the meantime, the solution for the PHP-problem has been received. We are now starting its implementation. We will report back at approximately 22:00.

Dear Customer,

Today a security leak was reported in a widely used programming language. To safeguard the security of your Totara learning platform, we are taking preventative measures immediately.

What does this mean for you?
We are temporarily taking down your learning environment straight away. At 16:00 CEST today, we will start applying the security update to mitigate the possible risk.
We expect you will be able to use the learning platform as usual by tomorrow morning.

We apologize for the inconvenience
We understand that a temporary unavailability of the learning platform is inconvenient. However, we prioritize the security of your learning environment and data. That is why we choose to implement this preventative measure.
We are doing everything possible to make the learning environment available again as soon as possible.

Thank you for understanding and apologies for the inconvenience.