All Systems Operational

Mindtickle Platform Operational
Interface Operational
Admin Site Operational
Learning Site Operational
Mobile App Operational
Knowledge Operational
Course / Quick-Update / Assessment Operational
Instructor-Led Training Operational
Spaced Reinforcement Operational
Practice and Execution Operational
Mission Operational
Coaching Sessions Operational
Call AI Operational
Content Management Operational
Content Center Operational
Asset Hub Operational
Digital Sales Rooms (DSR) Operational
Analytics Operational
In-Platform Analytics Operational
Reporting API Operational
Operational Operational
Login Operational
User Sync Operational
Rule Automation Operational
Notifications Operational
Mindtickle Copilot Operational
Mindtickle Copilot Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

Oct 25, 2026

No incidents reported today.

Oct 24, 2026

No incidents reported.

Oct 23, 2026

No incidents reported.

Oct 22, 2026

No incidents reported.

Oct 21, 2026

Resolved - Summary
• Two critical vulnerabilities in the PHP runtime (“PHP2Shell”) were publicly disclosed on Oct 21, 2026.
• The Mindtickle platform, including customer learning sites and custom-domain deployments, is built primarily on Go, JavaScript, TypeScript, Python, and Java, and is not affected.

Affected component
• One supporting component used PHP: the backend service for the in-app “Report an issue” feedback form. It is separate from the help-article search and chat features in the same support panel, which run on other services and are not affected.
• It serves the feedback form and receives a report when a user submits one. The service forwards the report to our support team’s helpdesk.
• It runs separately from the core Mindtickle platform. It is not part of how learning sites are served, how users sign in, or how learning content and tenant data are stored or processed. It has no access to the systems that hold that data.

Remediation
• On Oct 23, 2026, we applied the mitigating configuration changes recommended in the PHP security advisory to reduce the risk of exploitation while we prepared the upgrade.
• On Oct 24, 2026, we upgraded the component to PHP 8.3.36, the fixed release, across all production regions and verified the fix.
• We also added a request-filtering control as a defense-in-depth measure. The component remained in service throughout, with no downtime.

Investigation
• We reviewed logs from Oct 20, 2026, the day before public disclosure, through remediation on Oct 24, 2026.
• We found no evidence of exploitation and no evidence that any customer data was accessed or exposed.

No action required
• There is no need to rotate passwords, API keys, SSO settings, or integration credentials.
• We continue to monitor and will update this page if anything changes.
• For questions, supporting evidence, or a formal attestation, email infosec@mindtickle.com.

Oct 21, 07:00 PDT

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Oct 12, 2026

No incidents reported.

Oct 11, 2026

No incidents reported.