Security
Security updates
The web interface of the DECT system uses an embedded PHP runtime. Two vulnerabilities in this runtime (CVE-2026-109618 and CVE-2026-109619) allowed arbitrary code to be executed there without logging in, provided that the web interface was reachable via HTTP or HTTPS. The PHP runtime has been updated to a version containing the corresponding fixes.
Important: Install the update promptly. Also make sure that the web interface is not reachable from the Internet or from other untrusted networks. For remote administration, use a VPN into the management network.
Go to Downloads
