Outage in Canvas Instructure
PHP Awareness
Resolved MinorIncident Report
Summary AI Generated
Instructure identified two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, "PHP2Shell") affecting some of their products, though Canvas itself was confirmed unaffected as it does not use PHP. Some users reported login issues and two-factor authentication failures during the incident window. Over approximately 4 hours, Instructure assessed all affected products, applied compensating controls, and completed remediation for any customer-facing services that required action.
Instructure is aware of CVE-2026-109618 and CVE-2026-109619 (referred to as "PHP2Shell"), affecting PHP. The Canvas application does not use PHP and is not affected. We have completed an initial assessment of our other products. Where affected PHP versions are in use, we are prioritizing remediation and have implemented compensating controls and additional monitoring while that work is completed. We will update as remediation progresses.
Latest Updates ( sorted recent to last )
RESOLVED
21 days ago - at 10/22/2026 01:31AM
Canvas does not use PHP and is not affected. We have assessed all products on this status page. Where action was needed to protect customer-facing services, the remediation is complete.
MONITORING
21 days ago - at 10/22/2026 12:31AM
We are continuing to monitor for any further issues.
MONITORING
21 days ago - at 10/21/2026 11:32PM
We are continuing to monitor for any further issues.
MONITORING
21 days ago - at 10/21/2026 10:32PM
We are continuing to monitor for any further issues.
MONITORING
21 days ago - at 10/21/2026 09:34PM
Instructure is aware of CVE-2026-109618 and CVE-2026-109619 (referred to as "PHP2Shell"), affecting PHP. The Canvas application does not use PHP and is not affected. We have completed an initial assessment of our other products. Where affected PHP versions are in use, we are prioritizing remediation and have implemented compensating controls and additional monitoring while that work is completed. We will update as remediation progresses.
Latest Canvas Instructure outages
Portfolium is unavailable in the Sydeny region - 8 days ago
Some ChromeOS users were unable to log into Canvas - 16 days ago
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6320 services available
Integrations with
