Status: Ongoing
Last updated: 22 October 2026, 11:30 UTC
On 21 October 2026, two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were identified in PHP, a programming language widely used across the internet by websites and software providers.
The UK National Cyber Security Centre, Cybersecurity & Infrastructure Security Agency and other national cybersecurity authorities have urged organisations to review their websites and software and apply necessary security updates as quickly as possible.
The security protocols we have in place have allowed us to respond immediately. We’ve identified the programs that use impacted versions of PHP and, where necessary, temporarily taken services offline as a precaution while we apply the required security updates.
The vast majority of Everway products remain fully operational, and several affected services have already been restored overnight.
We understand how important uninterrupted access to our products is for the people who rely on them every day. Our teams are working to restore any remaining services as quickly and safely as possible.
Product status
Products not affected
The following Everway products are operating as normal and have not experienced any disruption as a result of this issue.
Read&Write, Equatio, OrbitNote, Lingdys, SpeechStream, ReachDeck, MindView, Scholarcy, Wordbank, ExamWritePad, WritingHelper, GlobalTasks, uPar, EduLife, Snap&Read, Co:Writer, QuizBot & MeetingBooster.
Unique Learning System (ULS), News2You, L3 Skills, Inspire, SymbolStix PRIME, Polaris, SpedTrack, Positivity, Inspire, Classics, the n2y online store, and TeachTown (including all Core Curriculum, Interventions & Resources).
If a product you use is not listed, please contact Everway Support.
Affected products
| Product | Status | What you may notice |
|---|---|---|
| AppWriter, Lexiflow, SkrivaText, OribiSpeak, TxtAnalyser, MathSolver | Resolved | On 21 October we made the decision to take these products offline in order to protect our customers. These services have since been updated to unimpacted versions of PHP and as of 22 October are fully operational again. |
| Embrace (including Parent Portal) | Resolved | Our service providers immediately put additional security measures in place while we completed the necessary updates. These updates are now complete, and all core Embrace products are operating normally. |
| ClaroRead | Resolved | On 21 October we made the decision to disable access to downloads, licensing and reseller orders. These services have since been updated to unimpacted versions of PHP and as of 22 October are fully operational again. |
| GlobalAutoCorrect | Partially affected | Our licensing services are temporarily unavailable while we complete the necessary security updates. If you already have GlobalAutoCorrect installed, your software will be unaffected. However, you may experience difficulties activating new licences for the first time until these updates are complete. |
| Wordsplain, Rewordify, EasySped | Offline | Access is disabled until patched. |
