Learnosity — status

Official status checked

Learnosity has active maintenance

Official maintenance active

Learnosity Demos Site – Temporary Maintenance — ## Affected Systems and Regions On 21 October 2026, Learnosity temporarily took the Learnosity Demos site offline as a precautionary measure following the disclosure of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell. The maintenance affected the Learnosity Demos site only. Learnosity's production APIs and services remained operational, with no customer-facing service disruption identified. ## Investigation The vulnerabilities affected PHP, a widely used server-side programming language used by Learnosity services, as well as an estimated 70% of internet applications. Both vulnerabilities were rated critical \(CVSS 9.2\) and could potentially allow unauthorized remote code execution. Learnosity's Platform and Security teams reviewed potential exposure across the platform and implemented additional monitoring and protective measures while awaiting official security updates. Our investigation and subsequent monitoring found no evidence of exploitation or compromise associated with these vulnerabilities. ## Resolution The PHP Project released security updates at 14:00 UTC on 21 October 2026. Learnosity immediately began deploying these updates, rebuilding all PHP services using the official PHP 8.3.36 release. Following completion and verification of the updates, the Learnosity Demos site was restored to service on 22 October 2026. All Learnosity Build servers have been patched, and no action is required for customers using Learnosity's hosted APIs and services. ## Prevention Learnosity continues to monitor its services for potential exploitation and maintains security monitoring and protective measures to identify and respond to emerging threats. Customers operating their own PHP environments, including those using the Learnosity PHP SDK in server-side integrations, should ensure their PHP installations are updated to a patched version following their hosting provider's or operating system's guidance.

Official incident resolved

Enhanced Math scoring experiencing delays n the US-East-1 region — ## Affected Systems and Regions On 20 October 2026, Learnosity experienced scoring delays and intermittent request failures affecting Enhanced Math scoring in US-East-1. Customer impact began at approximately 13:06 UTC and ended at 13:47 UTC, lasting approximately 41 minutes. Affected scoring requests experienced longer than normal processing times, and some direct requests to the Data API scoring endpoint returned errors. For sessions saved through the Items API, affected scoring requests were queued and retried, resulting in delayed score availability rather than scoring failures. Assessments without math questions and services in other regions were unaffected. ## Investigation Our investigation identified a specific pattern of scoring requests that resulted in unexpectedly high processing times. This reduced the capacity available to process other scoring requests, causing delays and intermittent timeouts. The issue was associated with how certain scoring inputs were processed, rather than an unexpected increase in overall request volume. ## Resolution Scoring performance returned to normal by 13:47 UTC. At 15:12 UTC, Learnosity engineers implemented additional traffic isolation to prevent the affected scoring workload from impacting scoring operations for other customers. ## Prevention Learnosity has implemented changes to reduce unnecessary resource consumption and improve the recovery of affected scoring requests. Further improvements are underway to strengthen scoring request validation, improve processing safeguards and prevent individual scoring workloads from affecting the wider service. Additional isolation measures will remain in place while these improvements are completed and their effectiveness is verified.