DHD.audio

Current DHD consoles, cores and modules

Response status

Unaffected

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-28

October 22 final advisory confirms current mixing systems do not use PHP.

Scope: Explicit table: XC3/XD3/XS3, RM1/RM1 Pro, RX2/SX2/DX2/TX2 and AES67/RAVENNA.

What users should do

No update or configuration change required.

Official service URL

• https://dhd.audio/

Source URLs

1. DHD.audio: PHP vulnerability responsehttps://dhd.audio/security-advisory-on-cve-2026-109618-cve-2026-109619-php2shell-vulnerabilities/Response evidence

Legacy XC2/XD2/XS2 and XC/XD/XS cores

Response status

Unaffected; internal PHP

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-28

Internal PHP cannot be reached over the network.

Scope: Includes XC2/XD2/XS2 firmware 9.1 or earlier; not a claim of absent PHP.

What users should do

No incident-specific changes required.

Source URLs

1. DHD.audio: PHP vulnerability responsehttps://dhd.audio/security-advisory-on-cve-2026-109618-cve-2026-109619-php2shell-vulnerabilities/Response evidence

DHD WebApps, Control API, PC software and discovery

Response status

Unaffected

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-28

All versions are listed as unaffected.

Scope: WebApps on core; PC tools include Toolbox and DHDCS. Excludes third-party systems.

What users should do

No incident-specific update required.

Source URLs

1. DHD.audio: PHP vulnerability responsehttps://dhd.audio/security-advisory-on-cve-2026-109618-cve-2026-109619-php2shell-vulnerabilities/Response evidence