About the Reported PHP Vulnerabilities: Jicoo Is Not Affected

Thank you for using Jicoo.

This notice explains how the PHP vulnerabilities disclosed on October 21, 2026 affect Jicoo, and asks you to set up two-factor authentication and review your password to keep your account secure.

Impact of the PHP vulnerabilities on Jicoo

On October 21, 2026, critical vulnerabilities in the PHP programming language (CVE-2026-109618 and CVE-2026-109619) were disclosed.

Jicoo does not use PHP, so these vulnerabilities do not affect Jicoo.

• You can continue to use Jicoo as usual, including booking pages, the dashboard, and the API.
• No system maintenance is planned in relation to this issue.
• No action, such as changing your settings, is required on your side in response to this issue.
• The information you entrust to Jicoo is not affected.

Please set up two-factor authentication

Separately from these vulnerabilities, we recommend setting up two-factor authentication to protect your account from unauthorized sign-ins by third parties.

With two-factor authentication, you confirm your identity at sign-in with a 6-digit code shown in an authenticator app (such as Google Authenticator) in addition to your password. Even if a third party learns your password, the risk of unauthorized sign-in is reduced.

To set it up:

1. Sign in to Jicoo.
2. Open "Login Settings" in Account Settings.
3. In the two-factor authentication setting, scan the QR code with your authenticator app and enter the code it shows.

• When setup is complete, we issue a backup code for when you can no longer use your authenticator app. The backup code is shown only once, so store it in a safe place.
• If you sign in only with a Google, Microsoft, or Apple account, this setting is not shown. Please use the two-step verification of that service.

For detailed steps, see the help article "Set up two-factor authentication (authenticator app and backup code)".

Please review your password

Short passwords, easy-to-guess passwords, and passwords used on other services increase the risk of unauthorized sign-in. If you use the same password on Jicoo as on other services, we recommend changing it to a longer password that you use only for Jicoo.

You can change your password in Account Settings.

Our approach to security

We continuously monitor for vulnerabilities with security scanning tools and regularly collect vulnerability information. If a vulnerability that affects Jicoo is found, we respond promptly.

We will continue to work on security so that we can keep your information safe.

Contact us

If you have any questions, please contact us through the chat on the Help center.

Thank you for choosing Jicoo.