Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

RM system setup notes

RM schools should set a custom temp folder of C:\Program Files\4Matrix\Temp and set updates to run as the logged in user in the relevant step in the Network Manager wizard.

You should then give staff full control over the 4Matrix client folder on each PC e.g. C:\Program Files\4Matrix

If you are allocating the software using the RM Management Console please enter the following code on the security tab for the 4Matrix package, replacing the word ‘Everyone’ with the name of your staff group:

 

<object name="C:\Program Files\4Matrix" type="1" action="0">

<ace name="Everyone"mask="0x1F01FF" flags="3"></ace></object>

 

Note for later: If updates fail after following the instructions above, you may need to use a Launcher Settings file.

You can download a customisable Launcher Settings file from the following links:

Update Mode 1: www.4Matrix.com/files/downloads/ls1/LauncherSettings.xml 

 

Update Mode 2: www.4Matrix.com/files/downloads/LauncherSettings.xml (note: this must be used with an msi that is later than 3.9.5.0, available from www.4Matrix.com/downloads)

Place the LauncherSettings.xml file in C:\Program Files\4Matrix and use Launcher.exe to run 4Matrix. This should solve the problem.