Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

Fine Grade formats

4Matrix now supports multiple fine grade formats and it is possible to use a mixture of these in the same series.

As well as the standard 1, 2, and 3 to indicate high, mid and low grades (i.e C1, C2, C3 etc), KS4 also supports +/- to indicate high and low grades (recommended for use with 9-1 GCSEs). When using this format, a 4-, 4 and 4+ would indicate a low, mid and high grade 4 respectively. The a/b/c format is supported where a is high, b is mid and c is low e.g. 5a, 5b, 5c (note that this format MUST use lower case).

Where schools are using +/- format with an ‘=’ to indicate the mid-grade (i.e. 4=), this will be flagged as an error in the Validate Data step of the import.  Also, users may have noticed that FFT are providing the low grade indicator ‘-‘ to the left of the number grade (i.e. -9) and 4Matrix will also flag this as an error. We have provided a new 'Fix Fine Grades' function in the top right of the import window that will automatically resolve these problems.

There are several tools which support Fine Grades, and the majority of them will show the format that you choose to upload. However, Progress 8 and Transition Matrices will default to show +/-. The Fine Grade Analysis tool will default to 1/2/3. This cannot be changed.

Using School Options (under the Admin tab) users can force the Transition Matrices and EM Threshold tools to show custom characters for the Fine Grade column labels. There is more on this in the 4Matrix Admin guide, accessible via the Help tab in 4Matrix.