MOBOTIX ONE cameras are not affected by the PHP2Shell security vulnerabilities
Security Advisory | 27 October 2026
Following the disclosure of the critical PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), MOBOTIX has assessed the potential impact on MOBOTIX ONE cameras.
The two vulnerabilities affect the PHP programming language and, under certain conditions, could allow malicious code to be executed without prior authentication.
Security Assessment
The security assessment confirms that MOBOTIX ONE cameras are not affected by the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
**This is because PHP is not used in the firmware of MOBOTIX ONE cameras. ** The vulnerabilities mentioned therefore do not apply to these cameras.
Action Required and General Security Recommendation
Users of MOBOTIX ONE cameras do not need to take any action in relation to the PHP2Shell security vulnerabilities mentioned.
The cameras can continue to be used as normal and without any restrictions caused by these vulnerabilities.
Regardless of this, MOBOTIX generally recommends updating the camera firmware regularly to the latest available version in order to benefit from the latest security enhancements, bug fixes and functional enhancements.
The MOBOTIX MxManagementCenter (MxMC) allows firmware updates to be carried out quickly, easily and efficiently. Multiple MOBOTIX cameras can be selected at the same time and updated in parallel. This makes regular maintenance and updating of larger camera installations particularly straightforward.
A description of the firmware update function, including examples of use and screenshots, can be found on the MOBOTIX Community:
MxMC Camera Manager – A tool for managing and updating multiple cameras
The latest version of MxManagementCenter is also available for download:
Download MxManagementCenter 2.9.4
MOBOTIX will continue to monitor the security situation closely and provide relevant information as new developments arise.