Update: 23/10/2026
PHP security issue an update across Juniper software and services
We know schools have questions following news of the global PHP security issue and the Department for Education’s request to seek assurance from suppliers.
As soon as we became aware of the issue, our technical teams began reviewing Juniper’s software, websites and supporting infrastructure. They identified where PHP was used and prioritised the security updates and protective measures needed.
Our technical leadership has confirmed that the necessary work to address the identified risks has been completed. Checks and monitoring are continuing.
Our software and online services
Our review extends beyond school websites to our MIS, assessment, HR and payroll products, parent applications and services accessed through Juniper Portal.
These services can continue to be used. Customers do not need to make technical changes to the services we manage.
If any service requires different advice or action from customers, we will contact those customers directly.
School websites
Juniper-hosted school websites can remain online. Schools do not need to take them offline or make technical changes themselves. We are also providing website customers with a direct response to the DfE’s request for supplier assurance.
Pupil Asset
Pupil Asset required more complex technical work and was taken offline as a precaution. The work has now been completed, and Pupil Asset is back online.
Status Updates
We’re sorry for the disruption and will keep affected schools updated through the Help Centre and direct communications.
Protecting your school’s information remains central to our response. For the latest service updates, please visit Status Updates.
Original article: 22/10/2026
You may have seen the recent BBC coverage of a global security issue involving PHP, software used by many websites and online services.
We understand that you may have questions about what this means for your school. Our technical teams are responding to the issue across Juniper services, putting protections in place and applying security updates.
What is PHP, and what has happened?
PHP is software that helps websites and online applications run. A critical security issue has been identified that could allow attackers to gain unauthorised access to systems using it. Security updates have been released to address the issue.
How does this affect Juniper products?
A number of Juniper products use PHP. Our technical teams have identified the applications that use it and are checking those services and carrying out the necessary security work.
What is Juniper doing?
We have applied additional protections to all our production workloads. In most cases this means the underlying vulnerability has been patched; this is the case for all school websites, assessment trackers, analytics, estates, risk management and MIS customers. In a minority of cases we have taken systems offline until a patch can be applied, or we have implemented mitigations (WAF).
Do I need to do anything?
You do not need to make any changes to your Juniper services at this time. Our technical teams are managing the necessary work.
If that advice changes for any service, we will contact the relevant customers directly with clear instructions.
Updated