No. Edlio is not affected by the PHP vulnerability reported on October 21, 2026.
We are aware of the recent reports of a widespread security vulnerability in PHP that may put a large share of websites at risk. Edlio's CMS, App, and Pay systems are not built or dependent on PHP. Because of this, neither Edlio nor our clients' Edlio websites are at risk from this vulnerability, and no action is needed from you. We are continuing to review our systems, including any secondary or supporting tools, for any use of PHP, and will patch anything we find so that we are not exposed in the slightest. We take our cybersecurity, and the cybersecurity of our clients, very seriously.
What you may need to do: Nothing for your Edlio website or app. If your district runs other, separate systems of its own that use PHP, such as a self-hosted site or third-party software, those are managed outside Edlio and should be reviewed with your IT team or vendor.
Questions: If your IT team needs more information or a written statement, contact Edlio Support by opening a ticket.