Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

Notes on Pearson Qualifications

Please see https://qualifications.pearson.com/en/about-us/qualification-brands/btec/btec-information-hub.news.html?article=/content/demo/en/news-policy/qualifications/general-news/providing-a-grade-for-the-btec-first-award-for-students-who-have for the latest information on this.


Summary:

This service from Pearson will not run in 2020, but did take place in 2019 and will continue to do so in future years.

There are some qualifications that when taken do not count in performance tables but include the same content as a smaller qualification which does count in performance tables.

It is our understanding that in this case, the awarding organisation will award the learner the larger qualification and the school will be credited with the smaller qualification which does count in performance measures. All qualifications that are affected by this are included in the BTECs tab in the approved list of qualifications.

Schools will need to check with Pearson which pupils will automatically receive a grade in smaller qualifications, and how the grade conversion will work (as the grade structure will be different between larger and smaller versions of the same qualification).

This is not something that 4Matrix can account for automatically and schools will need to remain vigilant on exam results day and check that all grades are present.  Users should also check Grade Analysis to ensure that the correct grade is counting for pupils affected by this scenario.

 

 

Article revised: 13/07/2020