The German Federal Office for Information Security (BSI) has issued a warning about two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). On web servers running PHP, these flaws can allow attackers to execute code remotely.
MICROSENS products are not affected. None of our software products or managed switches use PHP. This applies to:
- Software: Network Management Platform (NMP), Smart Building Manager, Switch IP Config Tool and Smart Building Studio (all versions)
- Hardware: All MICROSENS managed switches and smart controllers, including the integrated web management interface (all firmware versions)
Our official Manufacturer’s Declaration dated 22 October 2026 confirms this. It contains the complete list of affected product families as well as references to the BSI warning and the CVE records.
No action is required for your MICROSENS installations.
If you have any questions, please contact your MICROSENS sales representative or our technical support team.










