We’re aware of the recently reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, and the concern they have raised across the industry.

We want to reassure our customers and partners: none of the Omnidocs Group products use PHP anywhere in their technology stack including runtime stack, build pipeline, or application code. This includes Create, officeatwork, Xink, CGX, and DynamicTemplate.

Your Omnidocs solutions are not exposed to these vulnerabilities, and no action is needed on your part.

Security is central to how we build and run our products, and the Omnidocs Group is ISO 27001 certified. We continuously monitor new vulnerabilities and will always communicate openly if anything affects our customers. Reach out to our support teams with any further questions.