Parakey is not affected by the PHP vulnerability

The latest news about security flaws in PHP naturally raises questions about how various solutions are affected. That is why we want to be clear about what this means for Parakey. The answer is simple: Parakey is not affected by the reported PHP vulnerabilities, since our software does not use PHP.

This concerns the vulnerabilities known as PHP2Shell, with the identifiers CVE-2026-109618 and CVE-2026-109619. As a customer or user, you therefore do not need to take any action in Parakey regarding these vulnerabilities.

When you entrust access to your premises to someone else, you need to have confidence in the solution and the people behind it. We take that responsibility very seriously. That’s why I’d also like to tell you a little about how we approach security in our day-to-day operations.

‍

Security requires continuous improvement

Security is an integral part of everything we do, from our initial technology choices to how we build and further develop our products. We take a proactive approach and always strive to stay one step ahead by continuously strengthening our solutions and monitoring changes in the threat landscape. At Parakey, we release several updates each week. These may include new features, optimizations, and ongoing security updates.

You’ll notice some improvements right away in the app or web portal. Others take place behind the scenes and strengthen the solution you use every day. Both are important for ensuring that Parakey remains secure, robust, and easy to use over time.

‍

High security as standard for all customers

All of our customers enjoy the same high level of security as a foundation. Our ongoing security efforts and security updates are included as standard, regardless of the customer’s size or chosen plan.

As a co-founder and CEO, it goes without saying that we must continue to earn that trust every day through the way we build, develop, and maintain our products.

Do you have questions about the PHP vulnerability or about security in Parakey? Feel free to contact us at support@parakey.co, and we'll be happy to help you.

‍

Hardware without an Internet connection

And a quick reminder: our hardware is not connected to the internet and is therefore not directly exposed to attacks from there. This provides an extra layer of protection, in addition to, for example, our high levels of encryption, unique messages, and replay protection, which prevents recorded unlock messages from being used again.

‍

Sincerely, Jonas Arvidsson.
CEO and co-founder of Parakey

‍