Security update: PHP vulnerabilities

Incident Report for Essential Assessment

Resolved

Status: Monitoring

Security fixes were recently released for PHP, a programming language used by many websites and applications.

No action is needed by schools. Below, we've outlined our response:

• We have deployed patches to Essential Assessment (EA) and confirmed the fix is in place.
• Our internal teams have been actively monitoring the situation and implementing several mitigating actions.
• We have not detected any signs of misuse, and continue to monitor our systems.

We will continue to provide updates as they are available.

Posted Oct 22, 2026 - 04:00 AEDT