Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

How do I deal with unmatched pupils in the import?

There are generally 2 reasons as to why a pupil is unmatched;

  1. They are a new pupil to the school (and 4Matrix) and therefore they have no matching record in 4Matrix. Select the pupil, right click and choose Mark as New Pupil.

  2. If the pupil already exists in 4Matrix then the match process has failed, most likely to do with a change of name. Select the pupil in the My Data panel and then use the search box in the Match Pupils panel to find the pupil. Highlight the pupil to Match and then click Use Selected. Don't forget to tick the box on the left which says 'Update Pupil Names on Import' if you need to use their new name in 4Matrix. 

To remove the pupil from the import, tick the box next to the pupil, right click and go to Remove Selected Rows.

*We always recommend including the UPN on any spreadsheet import as 4Matrix will match using this first.