2wcom provides new firmware updates to address two critical PHP vulnerabilities, helping customers maintain secure and reliable broadcast operations.
Security is an essential part of modern broadcast infrastructure. With broadcast systems increasingly relying on IP-based connectivity and web-based management interfaces, keeping devices protected against newly discovered vulnerabilities remains a priority.
On October 21, 2026, two critical security vulnerabilities in PHP were disclosed: CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS severity scale. These vulnerabilities could potentially allow unauthorized access and the execution of malicious code on affected systems.
In response, 2wcom is providing new firmware versions as of October 22, 2026, addressing both vulnerabilities in the affected products.
Available Firmware Updates
The following firmware versions include the necessary security fixes:
| Product | Firmware Version |
|---|---|
| IP-4c | 2.18-rc10 |
| IP-4d | 1.07-rc9 |
| IP-8e |
2.18.4-rc2 |
| IP-8i |
1.03-rc1 |
| IP-8m |
2.18-rc2 |
| SAT-4d | 1.07-rc9 |
| SAT-4da | 1.07-rc9 |
| MPX-1g | 1.16-rc13 |
| MPX-1c | 1.07.2-rc4 |
| MPX-2c | 1.07.2-rc4 |
| MPX-2d | 1.05-rc1 |
| MPX-2ds |
1.05-rc1 |
| RF-10e |
1.07-rc3 |
| DAB-4c |
1.39-rc1 |
| DAB-4s |
1.39-rc1 |
| X-4s |
v1.16-rc2 |
| X-4sd |
v1.16-rc2 |
| MoIN-Container |
2.9.0-rc5 |
Additional firmware versions will be made available as they become ready.
Keeping Your Devices Up to Date
We recommend that customers using affected devices install the available firmware updates as soon as possible to address these security vulnerabilities.
The updates are available through our Download Center or directly via the device’s web interface using Check4Updates, allowing customers to update their systems conveniently.
For customers requiring a fix for a specific firmware version, backports can be requested through our Support Portal.
Older 2wcom Platforms
Products based on our older platform architecture are not affected by these vulnerabilities. This includes, for example, the A30, DSR0x, FlexDSR0x, C02, FM02, FlexXtract+, and FlexNsert+.
By providing timely firmware updates, 2wcom continues to support the security and reliability of broadcast infrastructure.
For further information or assistance with firmware updates, please contact our Support Team.