Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

What is a map file?

A Map file stores your subject definitions to help 'speed up' the import process.

It stores the settings that are used in the mapping process e.g. qualification mappings, where a subject called 'Art and Design' is linked with qualification 6000XXXX.

The map file can also contain mappings standard pupil level fields and custom fields.

A Map file can be saved at the end of the mapping process in the import wizard so that future imports can be completed more quickly. By loading the Map file it will recall the settings saved in that file.

The following notes may also help:

1) The Map file will only work where the subject(s) is named exactly the same in the data to be imported and the Map file. For example, a Map file with a link for a subject named 'German 9-1' will NOT be applied to a column in the import named 'German GCSE 9-1'.

2) It is possible to use a Map file to complete part of the import only. For example, you may be importing a new subject for the first time along with your usual set of subjects. Use the Map file to quickly Map subjects which have been used before, and then manually map your new subject. Remember to then save a new Map file for future imports.

It is likely that schools will have a set of map files as names of subjects used for each year group and the qualifications will differ for different cohorts.

You can save a Map file after the import by  going to Admin > Edit Subject > File> Create Import Map. The settings will be based on the selected series and will contain all the subjects and their qualification links as shown on the left of the Edit Subjects tool.