Resolved · lasted 7 h

Instructure outage on October 21

Reports for Instructure jumped to 76 an hour and stayed high for 7 h.

Started
2:00 PM
October 21, 2026 · UTC
Back to normal
9:00 PM
7 h later
Peak
76/hr
8× normal
Instructure’s incident
—
PHP awareness

Reports during the outage

12:00 PM10:50 PM UTC

What Instructure said

status.instructure.com
Monitoring8:43 PM

PHP awareness

  1. Monitoring · 8:43 PM

    Instructure is aware of CVE-2026-109618 and CVE-2026-109619 (referred to as "PHP2Shell"), affecting PHP. The Canvas application does not use PHP and is not affected. We have completed an initial assessment of our other products. Where affected PHP versions are in use, we are prioritizing remediation and have implemented compensating controls and additional monitoring while that work is completed. We will update as remediation progresses.

Instructure posted its first update 6 h 43 min after reports started rising.

Is Instructure down right now?

Live status, today’s reports and other past outages.

Instructure status now →