Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

4Matrix Desktop Importing KS4 APS for KS5 Progress Measures (Year 13 Academic year 2026/27)

As this cohort have nationally published GCSE result it is possible to import them using a GIAP extract.

  1. Log into DfE Secure Access, and select GIAP site at https://get-information-pupils.service.gov.uk/
  2. Select 'Search National Pupil Database'
  3. Paste the UPNs for the Year group i.e. Y13
  4. Select 'Search'
  5. Select 'Download NPD data'
  6. Select on 'Key Stage 4' and  'CSV'
  7. Click on 'Download'
  8. Once you have the .csv file, open it. Change the column heading from KS4_SEX to KS4_GENDER
  9. Copy the entire spreadsheet.
  10. In 4Matrix, go to Admin > Spreadsheet > GIAP and follow the steps in the wizard

In Step 1 either select an existing series or create a new one. KS4 data is not held against a series, so if you create a new one and then subsequently delete it (via Edit Series) the KS4 data will be retained.

As part of the wizard, 4Matrix will automatically remove unwanted columns. You should not need to edit or change any of the settings as you work through the import, as all relevant columns will be auto-mapped, and any remaining un-mapped columns will be dropped as you complete steps 4 and 5 of the import. 

Article revised: 15/09/2026