PHP security guidance
for schools.

Scope: Evidence Me. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Purple Mash / Mini Mash. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: 3CX PBX, in response to a question about Windows and Linux deployments. Separate integrations are outside this assurance.

Evidence: Official supplier notice or technical advisory.
Statement date: Official forum response; date not extracted.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: Mathletics. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Reading Eggs / Reading Eggspress. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Academy21. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Accent Catering. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Accessit Library. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Acronis Cyber Protect. This does not cover unrelated PHP applications on a school's server.

Evidence: Official supplier notice or technical advisory.
Statement date: Updated 22 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: Afi SaaS Backup. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: The exact products covered by the message have not been supplied. Confirm whether it covers the Connect, Summit or Ascent service your school uses.

Evidence: Customer-facing confirmation reported to OpsWise; the original message text has not been supplied or independently verified..
Statement date: Message date not supplied; reported to OpsWise on 26 October 2026..
Review recorded: 2026-10-26.

Advisory coverage: The reported confirmation concerns the PHP patch; individual CVE references and patch versions were not supplied.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: Alps has reportedly confirmed to customers that the PHP patch has been applied.
Scope: The exact products covered by the message have not been supplied. Confirm whether it covers the Connect, Summit or Ascent service your school uses.
Message date: Message date not supplied; reported to OpsWise on 26 October 2026.
Advisory coverage: The reported confirmation concerns the PHP patch; individual CVE references and patch versions were not supplied.
Evidence basis: Customer-facing confirmation reported to OpsWise; the original message text has not been supplied or independently verified.
Customer text review recorded: 2026-10-26.

Scope: Claude (general-purpose staff tool). Confirm the exact service and hosting arrangement used by your school.

Catalogue note: Candidate / check locally. Audit candidate; verify local use and approval. Inclusion does not imply approval for pupils or confidential data.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: AnyDesk. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Apple Classroom / Schoolwork. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Apple School Manager. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Applicaa Admissions+. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Applicaa Bursary+. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Applicaa Bursary16+. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Applicaa Exams+. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Applicaa Futures. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Applicaa Options+. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: ApplicaaOne. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: AQA Centre Services. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: The message names Arbor MIS and its file upload service. It does not separately identify MAT MIS, Arbor Payments, ScholarPack or Integris; confirm the scope of your subscription.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The message describes the original PHP incident and the 21–22 October remediation. It does not address the separate 23 October advisory.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: Arbor says it applied the security fix to Arbor MIS, checked its systems and restored file uploads at 15:54 on 22 October. It reports no evidence of compromise or customer data access and says schools do not need to act within Arbor MIS.
Scope: The message names Arbor MIS and its file upload service. It does not separately identify MAT MIS, Arbor Payments, ScholarPack or Integris; confirm the scope of your subscription.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The message describes the original PHP incident and the 21–22 October remediation. It does not address the separate 23 October advisory.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Arbor Payments / Arbor Pay. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: The message names Arbor MIS and its file upload service. It does not separately identify MAT MIS, Arbor Payments, ScholarPack or Integris; confirm the scope of your subscription.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The message describes the original PHP incident and the 21–22 October remediation. It does not address the separate 23 October advisory.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: Arbor says it applied the security fix to Arbor MIS, checked its systems and restored file uploads at 15:54 on 22 October. It reports no evidence of compromise or customer data access and says schools do not need to act within Arbor MIS.
Scope: The message names Arbor MIS and its file upload service. It does not separately identify MAT MIS, Arbor Payments, ScholarPack or Integris; confirm the scope of your subscription.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The message describes the original PHP incident and the 21–22 October remediation. It does not address the separate 23 October advisory.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: ScholarPack (legacy). Confirm the exact service and hosting arrangement used by your school.

Catalogue note: Retirement announced. Official announcement scheduled discontinuation in February 2026 and migration to Arbor; not listed as a current new-purchase option.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Integris / RM Integris (legacy). Confirm the exact service and hosting arrangement used by your school.

Catalogue note: Retirement announced. Official announcement scheduled discontinuation in February 2026 and migration to Arbor; old partner lists may still name it.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Aspens Services. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Assembly Analytics / Assembly Pro. Confirm the exact service and hosting arrangement used by your school.

Catalogue note: Check current support. Distinguish the analytics products from Assembly Platform integration; confirm current commercial support and version.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Assembly Platform. Confirm the exact service and hosting arrangement used by your school.

Catalogue note: Check current support. School dashboard controls app permissions; confirm current commercial/support arrangements because public pages include older brands.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Atera. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Ativion StudentKeeper / ContentKeeper. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Tinkercad under Autodesk’s remaining-products statement. PIX has mitigations with a permanent fix in progress; Fusion is fixed.

Evidence: Official supplier notice or technical advisory.
Statement date: Updated 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: Only the named Automattic-hosted platforms. This does not confirm the position of independently hosted WordPress websites.

Catalogue note: Additional hosting or infrastructure scope retained from the original directory.

Evidence: Official supplier notice or technical advisory.
Statement date: Published 21 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: B Squared Connecting Steps. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Evisense. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cloud-to-Cloud Backup only. This does not cover the separate Backup Service (BBS), which is under investigation.

Evidence: Official supplier notice or technical advisory.
Statement date: No publication or revision date displayed.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: Named components only. This is not a suite-wide patched or unaffected statement.

Evidence: Official supplier notice or technical advisory.
Statement date: No publication or revision date displayed.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: BBC Bitesize. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: BBC Teach. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Bedrock Learning. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Blooket. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: BookTrust school programmes. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: BoomReader. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: BounceTogether. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Brisk Teaching. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Core MIS, Finance and Vision only. Third-party integrations are not covered by the unaffected statement.

Evidence: Official supplier notice or advisory.
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: Original October PHP issue by context; specific CVE coverage should be confirmed with the supplier.
No explicit coverage of CVE-2026-115560 verified. Do not treat an earlier statement or its date as proof of the later fix.

Scope: Core MIS, Finance and Vision only. Third-party integrations are not covered by the unaffected statement.

Evidence: Official supplier notice or advisory.
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: Original October PHP issue by context; specific CVE coverage should be confirmed with the supplier.
No explicit coverage of CVE-2026-115560 verified. Do not treat an earlier statement or its date as proof of the later fix.

Scope: Busy Things. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge OCR Interchange. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge BASE. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge GO. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge Primary Insight. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge Secondary Insight (Baseline). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge Select Insight. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cambridge Wellbeing Check. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: My Cambridge / Teach Cambridge. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Canva for Education. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Caterlink. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CCEA Central Login / online applications. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CENTURY. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Teacher Centre. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Core platform only. Partner websites have separate remediation wording; third-party providers require their own assurance.

Evidence: Official supplier notice or advisory.
Statement date: 22 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: Original October PHP issue by context; specific CVE coverage should be confirmed with the supplier.
No explicit coverage of CVE-2026-115560 verified. Do not treat an earlier statement or its date as proof of the later fix.

Scope: Chartwells. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Meraki network dashboard is explicitly named. Systems Manager is not individually named; its position relies on Cisco’s statement about unlisted products.

Evidence: Official supplier notice or technical advisory.
Statement date: Updated 23 October 2026, 22:39 GMT, version 1.6.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Cisco Meraki Systems Manager. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Civica Cashless Catering. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Civica Financials for Education. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: ClassDojo. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Classroom Secrets. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cleverbox. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: ClickView (including Espresso / Twig content). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Code.org. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cognito. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Collins Hub (formerly Collins Connect / OpenPage). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Compass MIS. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SCARF. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Corbettmaths. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Cornerstones / Curriculum Maestro. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CPOMS Engage. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CPOMS Insight. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CPOMS StaffSafe. Confirm the exact service and hosting arrangement used by your school.

Catalogue note: Add-on transition. Now presented as a StudentSafe add-on; existing accounts transitioned during 2026. Confirm actual local configuration.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CPOMS StudentSafe. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: CPOMS VisitorSafe. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Craig 'n' Dave. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Smart Revise. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: The message refers to the catering platform but does not name Fusion, IMPACT, versions or individual CVEs. Confirm its application to your installation.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: CRB Cunninghams says its catering platform does not use the PHP components or infrastructure referenced in the announcement. It reports supporting critical solutions operational and unaffected, with no customer action or specific patches required for the issue described.
Scope: The message refers to the catering platform but does not name Fusion, IMPACT, versions or individual CVEs. Confirm its application to your installation.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: iPayimpact. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: CRB Cunninghams supplied a statement about its catering platform. It does not name iPayimpact, so this entry remains unconfirmed.
Scope: Related catering-platform communication, not product-specific confirmation.
Message date: Message date not supplied; recorded 24 October 2026.
Advisory coverage: Individual CVEs not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Clicker. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: DocsPlus. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Databridge MIS. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Datto RMM. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Datto SaaS Protection (formerly Backupify). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Analyse School Performance (ASP). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Check Your Performance Measures Data. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: COLLECT. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Common Basic Data Set (CBDS)

Catalogue note: Standard / specification. A data specification, not a hosted data processor.

Evidence: Catalogue specification reference. Check each implementation..
Statement date: Not a product security notice.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Compare School and College Performance. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: DfE Sign-in. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Explore Education Statistics. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Financial Benchmarking and Insights Tool. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Get Information About Pupils (GIAP). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Get Information About Schools (GIAS). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Learning Records Service (LRS). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Monitor Your School Attendance. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Multiplication Tables Check (MTC) service. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Reception Baseline Assessment services. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: School to School (S2S). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: View Your Education Data (VYED). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: National Curriculum Assessments Portal (NCA Portal). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: DfE daily attendance collection. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: SchooliP. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Desmos. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Co-ordinated admissions data files

Catalogue note: Standard / specification. Versioned specifications; actual portal is supplied locally.

Evidence: Catalogue specification reference. Check each implementation..
Statement date: Not a product security notice.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Common Transfer File (CTF)

Catalogue note: Standard / specification. CTF 26 valid from September 2026 in England; not a supplier or application.

Evidence: Catalogue specification reference. Check each implementation..
Statement date: Not a product security notice.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Diffit. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: DoodleLearning (DoodleMaths / English). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Reading Plus. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Dolce. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Exampro. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Testbase. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Dr Frost Maths. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Duolingo. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: e-Sgoil. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: TypingClub. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Digimap for Schools. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Spelling Shed. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Educake. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: C2k / MySchool / C2k Exchange. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Education Information Solutions (EdIS). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Glow. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SIMS (including SIMS 7, Connected and Next Gen). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SIMS ID. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SIMS Nova-T6. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: EVOLVEclubs. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: EVOLVEvisits. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Eedi. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: ePEP Online. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Egress Email / secure file transfer. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Emile. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: EntrySign. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: EPM HR / EPM Connect. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: EPM Payroll and Pensions. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: ESET Endpoint Encryption Server only, not a general ESET PROTECT status.

Catalogue note: Additional product-specific notice. This is separate from ESET PROTECT.

Evidence: Official supplier notice or technical advisory.
Statement date: Updated 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

A separate notice covers ESET Endpoint Encryption Server. It does not confirm this product’s position. Read related notice ↗

Scope: ESET PROTECT. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Eteach. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Read&Write as listed under 'Products not affected'. Do not extend this position to every Everway product.

Evidence: Official supplier notice or advisory..
Statement date: 23 October 2026, 13:30 UTC.
Review recorded: 2026-10-23.

Advisory coverage: Exact CVE coverage has not been established from the evidence recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Famly. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SchoolsBuddy. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Faronics Deep Freeze. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: FFT Aspire. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: FFT Aspire Data Exchange. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Firefly. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Focus eLearning. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: FortiGate running FortiOS. This does not establish the position of Fortinet’s education training service or every other product.

Evidence: Official supplier notice or technical advisory.
Statement date: Published 22 October; page displays 26 October 2026, 10:39.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Fortinet Security Awareness and Training: Education Edition. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Freesciencelessons. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Freshdesk. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Frog. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Furlong SchoolBase. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: GDPRiS. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: GDPR Sentry. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: GeoGebra. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Get Set 4 PE / Get Set 4 Music. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Gimkit. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: CAT4. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: GL Ready / Lucid assessment suite only. Other assessment products need separate confirmation.

Evidence: Official supplier notice or advisory.
Statement date: Latest entry: 22 October 2026, 14:45 CDT.
Review recorded: 2026-10-26.

Advisory coverage: Original October PHP issue by context; specific CVE coverage should be confirmed with the supplier.
No explicit coverage of CVE-2026-115560 verified. Do not treat an earlier statement or its date as proof of the later fix.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: New Group Reading Test (NGRT). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: New Group Spelling Test (NGST). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: PASS (Pupil Attitudes to Self and School). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Progress Test Series. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Testwise. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Gemini for Education. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Gemini Notebook (formerly NotebookLM). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Google Admin / ChromeOS Education Upgrade. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Google Classroom. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Customer PHP applications on Google Cloud, with platform-specific responsibilities. This is not a Google Workspace status notice.

Catalogue note: Additional hosting or infrastructure scope retained from the original directory.

Evidence: Official supplier notice or technical advisory.
Statement date: Updated 23 October 2026, 15:20 PDT.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: Google Workspace for Education. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Grammarsaurus. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Greenhouse core websites and CMS, excluding third-party embedded services.

Evidence: Official supplier notice or advisory.
Statement date: Undated public statement.
Review recorded: 2026-10-26.

Advisory coverage: Original October PHP issue by context; specific CVE coverage should be confirmed with the supplier.
No explicit coverage of CVE-2026-115560 verified. Do not treat an earlier statement or its date as proof of the later fix.

Scope: Groupcall Xporter. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Groupcall Xporter on Demand (XoD). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Boost Insights. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Boost Learning. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Hachette digital assessments (PiRA, PUMA, GaPS, ART and AMT). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SNAP (SNAP-SpLD, SNAP-B and SNAP Maths). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Handsam. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Harrison Catering. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: SCHOLAR. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Hikvision camera / recording systems. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: ClearPass Policy Manager within this grouped catalogue entry. The finding must not be extended to Aruba networking or AirWave generally. The current notice could not be rechecked on 26 October; ask your provider for the latest position.

Evidence: Official supplier notice or advisory. Full text was not accessible; title and indexed resolution reviewed..
Statement date: Indexed 23 October 2026; full revision date not verified.
Review recorded: 2026-10-23.

Advisory coverage: Exact CVE coverage has not been established from the evidence recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: GO 4 Schools MIS. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: GO 4 Schools modular platform. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: IDL Literacy / Numeracy. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Idox EHC Hub. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: iHasco. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: IMP finance and budgeting platform. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Insight Tracking. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Canvas application. Do not generalise this to customer-managed integrations.

Evidence: Official supplier notice or advisory..
Statement date: 22 October 2026 update.
Review recorded: 2026-10-23.

Advisory coverage: Exact CVE coverage has not been established from the evidence recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Store, Questionnaires and Passport Website; do not extend this to all InVentry services. The public notice says core architecture is not based on PHP. Anywhere App is listed operational, which is availability evidence only.

Evidence: Official supplier notice; customer communication recorded separately where available..
Statement date: 22 October 2026; page timestamp 13:27 BST, update text 08:23 BST.
Review recorded: 2026-10-24.

Advisory coverage: October PHP security issue; no CVE identifiers are named. Coverage of the later CVE-2026-115560 is not established.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: The supplied InVentry message says PHP servers supporting the Anywhere API have been patched. It separately says Store and Questionnaires may remain unavailable while updates continue. This is not a statement that every InVentry service is fully restored.
Scope: InVentry Anywhere API, Store and Questionnaires only; each has a different position.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: PHP servers supporting the InVentry Anywhere API only.

Catalogue note: Additional component scope from a supplied customer communication.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: InVentry says all PHP servers supporting the Anywhere API have been patched and are operating as expected.
Scope: PHP servers supporting the InVentry Anywhere API only.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Store, Questionnaires and Passport Website; do not extend this to all InVentry services. The public notice says core architecture is not based on PHP. Anywhere App is listed operational, which is availability evidence only.

Catalogue note: Additional component scope from a supplied customer communication.

Evidence: Official supplier notice; customer communication recorded separately where available..
Statement date: 22 October 2026; page timestamp 13:27 BST, update text 08:23 BST.
Review recorded: 2026-10-24.

Advisory coverage: October PHP security issue; no CVE identifiers are named. Coverage of the later CVE-2026-115560 is not established.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: InVentry says Store and Questionnaires may remain temporarily unavailable while remaining updates are completed.
Scope: InVentry Store and Questionnaires; not the Anywhere API.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Involve Education. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Includes Web Hosting, Managed WordPress, MyWebsite 8, Managed Nextcloud and HiDrive Next. Self-managed PHP on VPS or dedicated servers is excluded.

Catalogue note: Additional hosting or infrastructure scope retained from the original directory.

Evidence: Official supplier notice or technical advisory.
Statement date: Notice refers to 21 October 2026 release; no separate date displayed.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: iSAMS. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Every Compliance. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Every HR. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Every Payroll. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: IRIS Ed:gen. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: IRIS Financial Planner. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: IRIS Financials. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: IRIS ParentMail. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: IRIS PlusPay. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: School Spider. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-24.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: An IRIS group message reports precautionary restrictions on a small number of services, security updates and ongoing monitoring. IRIS reports no evidence of attempted attacks or customer data access, and says affected customers will be notified through their product portal. The message does not identify this product.
Scope: Group-level communication only; the position of this individual product is not established.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: Individual CVEs and product coverage are not stated.
Evidence basis: Customer-supplied text reviewed; authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: IRIS group-level response. Individual products and completion dates are not named. Do not treat this as confirmation that every IRIS service is unaffected or fully patched.

Catalogue note: Additional scope from a supplied customer communication.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Coverage of CVE-2026-115560 is not established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: IRIS reports security updates, checks and precautionary restrictions on a small number of services. It says most services are normal, has found no evidence of attempted attacks or customer data access, and will notify affected customers in their product portal.
Scope: IRIS group-level response. Individual products and completion dates are not named. Do not treat this as confirmation that every IRIS service is unaffected or fully patched.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Isaac Computer Science. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: iTRACK Education systems, websites and the Wonde connection described in the message. Not other similarly named iTrack products.

Catalogue note: Additional scope from a supplied customer communication.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Coverage of CVE-2026-115560 is not established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: iTRACK Education says its systems are unaffected and its websites do not use PHP or the affected services. It reports temporarily removing Wonde access until restoration, says it did not publish data to Wonde, and says no school action is needed.
Scope: iTRACK Education systems, websites and the Wonde connection described in the message. Not other similarly named iTrack products.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: The itslearning LMS. This does not clear external integrations or school-managed PHP components.

Evidence: Official supplier notice or advisory..
Statement date: Updated 23 October 2026.
Review recorded: 2026-10-23.

Advisory coverage: Exact CVE coverage has not been established from the evidence recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: IXL. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Jamf School. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: A2C / JCQ Data Transport Application. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Jigsaw. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: JCQ Centre Admin Portal / Access Arrangements Online. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Judicium websites and Jedu only. This does not establish a security position for every professional service or integration.

Evidence: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified..
Statement date: Message date not supplied; recorded by OpsWise on 24 October 2026..
Review recorded: 2026-10-24.

Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Customer communication: Judicium says the necessary security updates have been applied and its websites and Jedu have been restored to normal service after a precautionary suspension.
Scope: Judicium websites and Jedu only. This does not establish a security position for every professional service or integration.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Text supplied by a customer and reviewed by OpsWise; sender authenticity not independently verified.
Customer text review recorded: 2026-10-24.

Scope: Judicium HR and governance services. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Juniper Awards & Activities. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

A supplier notice was found for other products or a different scope. It does not confirm the position for this entry. Read related notice ↗

Scope: Juniper Managed Services. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Juniper MIS, within the service categories covered by Juniper’s group update.

Evidence: Official supplier notice or advisory..
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: October PHP security issue by context; individual CVE identifiers are not named.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Juniper-hosted school websites; supporting PHP components are included.

Evidence: Official supplier notice; customer communication recorded separately where available..
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: October PHP security issue by context; individual CVE identifiers are not named.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Customer communication: A school has reported receiving reassurance from Juniper about its school website. The customer wording and date were not supplied. The public website notice remains the source for the recorded position.
Scope: Juniper school website service as reported; do not extend to other Juniper services.
Message date: Message date not supplied; recorded by OpsWise on 24 October 2026.
Advisory coverage: The supplied communication refers to the PHP announcement but does not name individual CVEs.
Evidence basis: Reassurance reported by a school; message text, date and exact scope not supplied.
Customer text review recorded: 2026-10-24.

Scope: Pupil Asset is named as restored. The broader MIS category is covered, but Horizons is not separately named in the restoration statement.

Catalogue note: Check local migration. Provider retains Pupil Asset and Horizons login entries. Confirm local product, migration arrangements and current offering.

Evidence: Official supplier notice or advisory..
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: October PHP security issue by context; individual CVE identifiers are not named.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Sisra Analytics, within the service categories covered by Juniper’s group update.

Evidence: Official supplier notice or advisory..
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: October PHP security issue by context; individual CVE identifiers are not named.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Sonar Tracker, within the service categories covered by Juniper’s group update.

Evidence: Official supplier notice or advisory..
Statement date: 23 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: October PHP security issue by context; individual CVE identifiers are not named.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Just2easy Tool Suite (j2e). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Kahoot!. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Kapow Primary. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Language Angels. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Languagenut. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Languages Online. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Learning by Questions (LbQ). Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lexia Core5. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lexia PowerUp. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lexonik / Lexonic literacy programmes. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: LGfL Freedom2Roam / secure remote access. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: LGfL HomeProtect. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: LGfL MailProtect. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: LGfL SchoolProtect / WebScreen. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: USO / myUSO. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: LGfL GridStore Unlimited. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Libresoft Librarian / Librarian+. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Libresoft VisitorBook. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lightspeed Alert. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lightspeed Classroom. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lightspeed Filter. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Lightspeed Insight / Signal / MDM. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Linguascope. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Literacy Shed / Literacy Shed Plus. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Literacy Tree. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Little Wandle Letters and Sounds Revised. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Live Register catering. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Locker Connect / Locker Cloud. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: LGfL / NGfL SuperCloud. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Lyfta. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: MagicBooking. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: MagicSchool. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Malwarebytes public websites only; no endpoint-product assurance is stated here.

Catalogue note: Additional hosting or infrastructure scope retained from the original directory.

Evidence: Official supplier notice or technical advisory.
Statement date: Published 21 October 2026.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: ServiceDesk Plus. The statement also names ServiceDesk Plus MSP, SupportCenter Plus and AssetExplorer; no inference about all Zoho products.

Evidence: Official supplier notice or technical advisory.
Statement date: No date displayed.
Review recorded: 2026-10-26.

Advisory coverage: CVE-2026-109618 and CVE-2026-109619
The retrieved notice does not explicitly address CVE-2026-115560. Do not infer coverage of that separate advisory.

Scope: MASSOLIT. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: NumBots. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Times Tables Rock Stars. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Mathsframe. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: MathsWatch. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Medical Tracker. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Public notice search recorded: 2026-10-26. Customer message dates, where available, are recorded separately.

Scope: Memrise. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Mentimeter. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: micro:bit / MakeCode resources. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-23.

Advisory coverage: No product-specific PHP notice recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: PHP web applications hosted on Azure; not a blanket statement about Microsoft 365 or Entra ID. The current notice could not be rechecked on 26 October; ask your provider for the latest position.

Catalogue note: Additional hosting or infrastructure scope retained from the original directory.

Evidence: Official notice or advisory.
Statement date: 22 October 2026 (changelog).
Review recorded: 2026-10-23.

Advisory coverage: Exact CVE coverage has not been established from the evidence recorded.
Coverage of the separate 23 October advisory, CVE-2026-115560, has not been established.

Scope: Microsoft 365 Education. Confirm the exact service and hosting arrangement used by your school.

Evidence: Support or website link only; not a PHP confirmation.
Statement date: No PHP notice verified.
Review recorded: 2026-10-26.