Security update – Skolons actions regarding worldwide PHP vulnerabilities

October 22 2026

Skolon has been closely monitoring the recently disclosed PHP security vulnerabilities since the initial reports emerged.

Immediately following the disclosure, our technical teams assessed our infrastructure and identified systems that could potentially be affected.

The necessary security updates were implemented without delay and completed on 21 October 2026.

As part of our response, we:

• Reviewed our technical environment to identify systems and dependencies potentially affected by the vulnerabilities.
• Applied the necessary security updates to all identified systems.
• Verified that the updates were successfully implemented.
• Performed functional checks to ensure that our services were operating correctly.
• Assessed the situation for indications of unauthorised access or exploitation.

Current status

All identified vulnerabilities requiring remediation in our environment have been addressed, and all Skolon services are fully operational.

Customers can continue using Skolon as normal, including authentication and access to services for students, staff and guardians.

Some brief service interruptions occurred during the maintenance activities. All services have since been restored.

Security assessment

Based on our rapid response and security assessment, we consider the likelihood of exploitation to be extremely low.

We have found no indications that the vulnerabilities have been exploited in our environment or that customer data has been compromised.

For security reasons, we do not disclose detailed information about individual systems or our internal infrastructure.

‌

We continue to monitor developments and will take additional action if required.

What this means for you:

No action is required from customers at this time.

‌

The security of our platform and the protection of our customers' data remain our highest priorities.

‌

If you have any questions, please contact our support team.