Canvas Instructure

We are currently investigating this issue.

A fix has been implemented and we are monitoring the results.

We are currently investigating this issue.

We are currently investigating this issue.

The issue has been identified and a fix is being implemented.

We are currently investigating this issue.

Instructure is aware of CVE-2026-109618 and CVE-2026-109619 (referred to as "PHP2Shell"), affecting PHP. The Canvas application does not use PHP and is not affected. We have completed an initial assessment of our other products. Where affected PHP versions are in use, we are prioritizing remediation and have implemented compensating controls and additional monitoring while that work is completed. We will update as remediation progresses.

Users accessing Canvas Data 2 may receive 500 errors due to a vendor outage. We are working with the vendor to restore access to these services.

Instructure is aware of CVE-2026-109618 and CVE-2026-109619 (referred to as "PHP2Shell"), affecting PHP. The Canvas application does not use PHP and is not affected. We have completed an initial assessment of our other products. Where affected PHP versions are in use, we are prioritizing remediation and have implemented compensating controls and additional monitoring while that work is completed. We will update as remediation progresses.

We are currently investigating this issue.

We are currently investigating this issue.