Security Update – PHP Vulnerability

We are aware of the recent critical PHP security vulnerabilities highlighted by the National Cyber Security Centre (NCSC) on 21st October 2026.

We would like to reassure customers that our main platforms, 4Matrix Cloud and 4Matrix Fusion, do not use PHP and are therefore not directly affected by these vulnerabilities.

PHP is used within some of our supporting systems, including our customer support ticketing and billing systems. Our desktop application also communicates with our sales system for licence verification. These systems do not store customers' payment details or sensitive information as part of the licence verification process.

We have been in contact with our hosting provider, Krystal, who has confirmed that the necessary security fixes have been applied to address the reported vulnerabilities.

No action is required from our customers in relation to this advisory.

We take the security of our systems and customer information seriously and will continue to monitor security developments and work with our hosting provider to maintain appropriate protections.

SIMS Extract tool won't launch

After selecting the 'save to' location, there is another tick box that says ‘run from custom location’. Tick this, and then select another location in the field below (it can be the same as the ‘save to’ location) and you should find that this will solve the problem.

Essentially, when you run the sims extract, it changes a couple of the SIMS files in the C:\program files\4Matrix folder - if you don't have permission to write there, it will fail and not open the extract tool. The idea of the 'run from custom location' is that it temporarily copies those files to somewhere where you can write to (you have to specify the location, i.e the same place that you chose to save the extract to).