# MOBOTIX MOVE cameras, NVRs and CMS software are not affected by the PHP2Shell security vulnerabilities - EN

**URL:** <https://community.mobotix.com/t/mobotix-move-cameras-nvrs-and-cms-software-are-not-affected-by-the-php2shell-security-vulnerabilities-en/10804>\
**Category:** MOBOTIX MOVE - FAQ\
**Tags:** cyber-security, move, php2shell\
**Created:** [October 27, 2026, 3:44pm UTC](https://community.mobotix.com/t/mobotix-move-cameras-nvrs-and-cms-software-are-not-affected-by-the-php2shell-security-vulnerabilities-en/10804 "2026-10-27T15:44:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mx-JoergS](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.mobotix.com/mx-joergs/32/10425_2.png) [@Mx-JoergS](https://community.mobotix.com/u/Mx-JoergS)\
**Post date:** [October 27, 2026, 3:44pm UTC](https://community.mobotix.com/t/mobotix-move-cameras-nvrs-and-cms-software-are-not-affected-by-the-php2shell-security-vulnerabilities-en/10804/1 "2026-10-27T15:44:13Z")

</div>

# MOBOTIX MOVE cameras, NVRs and CMS software are not affected by the PHP2Shell security vulnerabilities

**Security Advisory | 27 October 2026**

Following the disclosure of the critical PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), MOBOTIX has assessed the potential impact on the MOBOTIX MOVE product family.

The two vulnerabilities affect the PHP programming language and, under certain conditions, could allow malicious code to be executed without prior authentication.

## Security Assessment

**The security assessment confirms that the MOBOTIX MOVE product family is not affected by the PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).**

This covers the following product ranges:

- **MOBOTIX MOVE cameras**  
The various MOBOTIX MOVE IP camera models, including bullet, dome, turret, PTZ and other camera variants.

- **MOBOTIX MOVE NVR**  
The network video recorders in the MOBOTIX MOVE product family for local video recording and the management of connected cameras.

- **MOBOTIX MOVE CMS Software**  
The central management software for managing and operating MOBOTIX MOVE NVR systems and connected cameras.

**The security audit has revealed that PHP is not used in the aforementioned MOBOTIX MOVE products.** The PHP2Shell vulnerabilities therefore do not apply to these products.

## Action Required and General Security Recommendation

Users of MOBOTIX MOVE cameras, NVR systems and CMS software **do not need to take any action** in relation to the aforementioned PHP2Shell security vulnerabilities.

The products can continue to be used as normal and without any restrictions arising from these vulnerabilities.

Regardless of this, MOBOTIX generally recommends regularly updating the firmware and software to the latest version available and approved for the respective product.

In addition to functional enhancements and improvements, the latest software versions also include bug fixes and help to ensure the long-term stability, compatibility and security of the entire system.

**MOBOTIX provides firmware updates for MOVE cameras and MOVE NVRs, as well as software updates for the MOVE CMS application.**

The relevant software versions, release notes and downloads can be found in the official MOBOTIX Download Centre:

[MOBOTIX Software Downloads – MOVE Cameras, MOVE NVR and CMS](https://www.mobotix.com/en/software-downloads)

Further information on the MOBOTIX MOVE NVR systems and the CMS software is available on the MOBOTIX product page:

[MOBOTIX MOVE NVR and CMS – Product information](https://www.mobotix.com/en/MOVE-NVR)

Please ensure that you only use software updates that have been approved for the relevant camera model, NVR system or CMS version.

MOBOTIX will continue to monitor the security situation closely and will provide relevant information should any new findings come to light.