Important Information About the PHP2Shell Security Vulnerabilities
Two critical security vulnerabilities (CVE-2026-109618 & CVE-2026-109619), known as “PHP2Shell,” have been discovered in PHP. The PHP developers have since released security updates to address these vulnerabilities. These updates are designed to prevent attackers from executing malicious code on affected systems under certain conditions.
On this page, we would like to inform you about the current status of our active services and products that are still under software maintenance.
Not affected are:
- Software Products:
- OPENweb
- OPEN FXL
- OPENview
- DEOS onSite App
- DEOS Secure Connect Portal
- DEOS pro.Building Suite
- Regin products
- Hardware Products:
- OPEN EMS / OPEN Secure EMS
- WRX Secure EMS
- DEOS Secure Connect Box
- DEOS TEO
- OPEN GATE (Order date on or after June 11, 2026)
- OPEN GATE TEO (Order date on or after June 11, 2026)
- DEOS onSite-Box (the installed OPEN Gate is affected) Order date on or after June 11, 2026)
- Regin products
Affected products:
- Hardware Products
- OPEN GATE (Order date before June 11, 2026)
- OPEN GATE TEO (Order date before June 11, 2026)
- DEOS onSite Box (the installed OPEN Gate is affected) (Order date before June 11, 2026)
We are identifying the necessary measures and will inform the affected partners and customers separately about the steps that need to be taken.
Products no longer affected:
- DEOS Secure Network (Cloud Service)
- We have already installed a patch. This has closed the security vulnerability. No action is required on your part.
We are in close contact with our suppliers to obtain information about our merchandise. As soon as we receive additional information, we will post it here.
If you have any questions about our products, please feel free to contact us through our support team.