PHP Security Vulnerability Update
The PHP security vulnerability detected on 21st October may have applied to around 70% of websites globally and many were taken down for a short period of time while the patch was applied. Further information can be found on the NCSC website here.
A fix was released later in the afternoon of the same day, which allows providers to patch their systems and close this vulnerability.
What Computeam has done
We can confirm that Computeam patched and updated all affected systems that we operate within hours of the fix being released. This includes our website (computeam.co.uk), our client support portal, the Learning Locker learning platform and the Compass digital standards platform. We have also reviewed the systems we manage on clients behalf, applied the update wherever PHP is in use, and checked them for signs of compromise.
However, many of the systems schools use, such as MIS, payments, safeguarding, communications and website platforms, are hosted by their suppliers. Only those suppliers can apply the update and confirm that they have done so, so we are relying on them to provide that confirmation.
What we are doing next
Our team is compiling a list of commonly used school systems, showing which suppliers have publicly confirmed their position, with a link to each supplier's statement. We will publish this on our website as soon as it is available, and keep it updated.
What we recommend you do
- If your school runs its own website or platform (for example WordPress or Moodle) that Computeam does not manage, check with whoever looks after it that it has been updated.
- Email your third-party suppliers (like parent communication portals, payment apps, and booking systems) to confirm their software is safe. If you are unsure, consider suspending their use until they confirm status, provided they are non-critical systems.
- Be cautious of unexpected emails asking you to "patch", log in or verify your details. Scammers often take advantage of news like this. If in doubt, contact us before acting.
- If a supplier tells you they have had, or suspect, a breach, contact your Data Protection Officer straight away, and let us know so we can support you with next steps.
How you can help
If you receive confirmation from any supplier, please forward it to support@computeam.co.uk so we can update the list for all our schools. If there is a specific service you are concerned about and the supplier has not responded, let us know and we will help you follow it up.
Posted on October 23rd 2026
Learning Locker
Climate project
Updating page...