Following the recent SI-CERT warning about critical PHP vulnerabilities, we would like to reassure our users that Codeks does not use PHP and is therefore not affected by these vulnerabilities.
On October 21, 2026, SI-CERT issued a security advisory regarding two critical PHP vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, which could allow remote code execution on affected systems.
We would like to inform our users that neither the Codeks software nor any of its associated add-ons developed by Jantar use PHP.
These vulnerabilities therefore do not affect Codeks, and no additional action or Codeks updates are required.
