All customers are fully patched with the official PHP fix, and we've restored upload limits for your media and files. Thank you for your patience and understanding.
Any questions or concerns, please contact support.
Posted Oct 21, 2026 - 20:26 BST
Update
We've applied our first round of fixes, and restored uploads (with a temporary 30MB limit).
Posted Oct 21, 2026 - 16:09 BST
Identified
We are making some security configuration changes, so don't expect to need to take the platform offline at this time.
We will keep you updated.
Posted Oct 21, 2026 - 15:11 BST
Update
Following our earlier update, here is what to expect for the rest of today.
Uploads Media and course package uploads in the admin area, user imports and profile picture uploads will stay unavailable until the PHP security update has been released and applied to the platform. Uploads within reviews are not affected.
From 15:00 (UK time) The PHP update and full details of the vulnerabilities are due for release at 14:00 UTC (15:00 UK time). Our team will review them straight away. Depending on what they show, we may decide to take the platform offline as a precaution while we apply the update.
If we take the platform offline
- The platform, including the apps, will be completely unavailable during this time. - Reviews already in progress are saved on the device and won’t be lost. - We aim to have the platform back within two hours. This depends on when the update becomes available to us: high demand around the world may slow access to it.
We’ll post here before taking the platform offline, then give regular updates until it is back.
What we recommend Please consider letting your teams know about the possible downtime this afternoon, so they can finish any time-critical work beforehand. We appreciate this is short notice.
We have acted ahead of the update to protect the platform, and your data remains secure. Thank you for your patience. If you have any questions, please contact our support team.
Posted Oct 21, 2026 - 14:22 BST
Update
We are continuing to investigate this issue.
Posted Oct 21, 2026 - 10:26 BST
Investigating
A security update for PHP, a widely used technology that part of our platform runs on, is due for release today. It addresses newly reported vulnerabilities that affect many websites and services across the industry.
As a precaution, we have temporarily turned off some file uploads:
- media and uploads in the admin area - user imports - profile picture uploads
Uploads within reviews are not affected and work as normal, as does everything else on the platform. This is a preventative step. Ocasta services and customer data have not been affected.
The update is expected at around 14:00 UTC (15:00 UK time) today. We will apply it as soon as it is available, in a short emergency maintenance window. You may notice brief interruptions during that time. The features above will be turned back on once the update is in place.
We will post an update here when maintenance starts and again when it is complete. If you have any questions, please contact our support team.
Posted Oct 21, 2026 - 10:26 BST
This incident affected: Ocasta Hosted Services (Ocasta Apps and Web).