Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

Settings file is not copying to clients when deploying 4Matrix (SCCM, Intune)

The 4Matrix Client MSI's issued after January 2019 should automatically deploy both the Settings and LauncherSettings files with the installation, provided they reside in the same folder as the MSI. However, Intune and SCCM require arguments to ensure these additional files are included with the deployment.

 

Intune

You will need to specify an argument to ensure that the Settings file is deployed with the MSI. 

The required argument is: COPY_FILES="\\MyServer\4MatrixDeployment\Settings"

Replace the server and path with your own, making sure that the Settings file path is accessible and correct for your network.

Add a second argument if you also require LauncherSettings.xml to be deployed. Here's an example of the argument with the client MSI, Settings and LauncherSettings included:

msiexec /D "4MClient.msi" /qn COPY_FILES="\\MyServer\4MatrixDeployment\Settings,\\MyServer\4MatrixDeployment\Settings\LauncherSettings.xml"

For reference, the Microsoft articles with related information are:

  1. https://learn.microsoft.com/en-us/mem/intune/apps/lob-apps-windows
  2. https://learn.microsoft.com/en-us/windows/win32/msi/command-line-options

 

SCCM

If you're using SCCM to deploy 4Matrix, you will need to use the same arguments as specified above for Intune, and we have included screengrabs for further information in the attached PDF.

 

 Article revised: 04/07/2024