Moodle Service Suspension and Status Updates Due to Critical PHP Security Vulnerability

Update 2 | 22 October 2026, 10:08 AM SGT

Confirmation of Service Suspension

Thank you for your continued trust in E-LEARNING.

Further to our earlier announcement regarding the critical PHP security vulnerability, we would like to confirm that the suspension of all Moodle environments hosted by E-LEARNING has been completed as part of our emergency security response.

All affected Moodle services are currently unavailable.

We will proceed with applying the necessary security patches and conducting verification to ensure that the environments are safe before resuming services. At this stage, the estimated service restoration time remains undetermined.

Further Updates

We will continue to provide status updates directly to our customers via email, approximately every two hours, even if there are no significant developments.

Updates will also be published on this page so that customers can check the latest information online.

If there are any significant developments, we will provide an update without waiting for the next scheduled time.

Please also note that our customer support portal is currently temporarily unavailable.

We sincerely apologize for the inconvenience and concern caused by this service disruption. We remain committed to prioritizing the security of our customers' systems and data and appreciate your patience and understanding.

Update 1 | 22 October 2026, 8:56 AM SGT

Emergency Service Suspension Due to Critical PHP Security Vulnerability

On 21 October 2026, a critical security vulnerability affecting PHP was publicly disclosed.

This vulnerability could potentially allow unauthorized remote code execution and requires urgent security measures.

As we have identified that Moodle environments hosted by E-LEARNING may potentially be affected, we have decided to temporarily suspend all Moodle environments hosted by our company to prioritize the security of our customers' systems and data.

Security patches for PHP have been released, and we are currently assessing when they can be applied to our hosting environments.

We will also conduct the necessary investigations to determine whether any unauthorized access or other security incidents have occurred.