
This week, two critical vulnerabilities in the PHP scripting language were disclosed (PHP2Shell – CVE-2026-109618, CVE-2026-109619). We have reviewed our products: WinGuard and AIM are not affected, as PHP is neither a component of the products nor required for their operation. Please note that some interfaces communicate with third-party subsystems that may themselves use PHP. Whether those systems are affected can only be assessed by the respective manufacturer or operator, and we recommend contacting them directly.
