MOBOTIX IoT cameras (e.g. M16, M15 and M12) are not affected by the PHP2Shell security vulnerabilities
Security Advisory | 27 October 2026
Following the disclosure of the critical PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), MOBOTIX has assessed the potential impact on its MOBOTIX IoT cameras.
The two security vulnerabilities affect the PHP programming language and, under certain conditions, could allow malicious code to be executed without prior authentication.
Security Assessment
The security assessment confirms that MOBOTIX IoT cameras from the Mx6 (P6) model generation and earlier generations are not affected by the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
The reason for this is that PHP is not used in the firmware of these MOBOTIX cameras. The vulnerabilities mentioned therefore do not apply to these cameras.
This includes, amongst others, the following camera models and platform generations:
-
MOBOTIX cameras on the P6 platform
For example, the M16, D16, S16, M26, D26 and Q26. -
MOBOTIX cameras on the P3 platform
For example, M15, D15, S15, M25, D25 and Q25. -
MOBOTIX cameras on the P2 platform
For example, M12, D12, V12, M22M, D22M and Q22M.
This list is provided for guidance only and is not exhaustive.
Action required and general security recommendation
Users of the MOBOTIX IoT cameras listed above do not need to take any action in relation to the PHP2Shell security vulnerabilities.
The cameras can continue to be used as normal and without any restrictions arising from these vulnerabilities.
Regardless of this, MOBOTIX generally recommends keeping the camera firmware updated to the latest version available and approved for the respective camera model, in order to benefit from security enhancements, bug fixes and, where applicable, functional enhancements.
The MOBOTIX MxManagementCenter (MxMC) allows firmware updates for supported MOBOTIX camera models to be carried out quickly and efficiently. Multiple cameras can be selected at the same time and updated in parallel.
This makes regular maintenance of larger camera installations particularly straightforward.
A description of the firmware update function, including examples of use and screenshots, can be found in the MOBOTIX Community:
MxMC Camera Manager – A tool for managing and updating multiple cameras
The latest version of MxManagementCenter is also available for download:
MxManagementCenter 2.9.4 herunterladen
You can find the latest camera firmware versions, which vary depending on the model, in the official MOBOTIX Download Centre:
MOBOTIX Software Downloads – Camerafirmware
Note for older camera models: Depending on the camera generation, the available firmware version and the range of functions offered by the software management system may vary. New firmware versions may no longer be available for older models. Please therefore refer to the relevant compatibility and support information.
MOBOTIX will continue to monitor the security situation closely and provide relevant information should any new findings come to light.