PHP Vulnerability Responses by Company

MOBOTIX AG

Global hosting
Aliases / services
MOBOTIX / MOBOTIX AG / mobotix.com / MxManagementCenter / MOBOTIX NAS / MxMC
Official website
https://www.mobotix.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Legacy MOBOTIX NAS and QNAP-migrated NAS

Response status
QNAP fixes available; verify model support
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Legacy MOBOTIX NAS ended in 2022; migration to QNAP software is recommended. QNAP now lists fixed QTS 5.2.11.3661/6.1.0.3656, build 20261023.

Scope: QNAP fix availability does not establish that legacy MOBOTIX firmware is patched. MxMC and third-party apps are separate.

What users should do

Back up, coordinate irreversible migration and model-compatible firmware with your partner, restrict exposure/UPnP and install the supported fix.

Official service URL

Source URLs

  1. MOBOTIX: PHP vulnerability responsehttps://community.mobotix.com/t/php2shell-important-security-information-for-qnap-nas-and-mobotix-nas-used-with-mxmanagementcenter-en/10785Response evidence
  2. https://www.qnap.com/en/security-advisory/qsa-26-18https://www.qnap.com/en/security-advisory/qsa-26-18Response evidence
  3. https://community.mobotix.com/latesthttps://community.mobotix.com/latestService and operation documentation
  4. MOBOTIX: operating-company informationhttps://www.mobotix.com/de/impressumService and operation documentation

MxManagementCenter (MxMC)

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

MxMC itself is unaffected by these vulnerabilities.

Scope: Connected NAS operating systems are separate; the 2.9.4 recommendation is routine maintenance.

What users should do

No action for these vulnerabilities; continue routine updates.

Source URLs

  1. https://community.mobotix.com/t/mobotix-mxmanagementcenter-mxmc-is-not-affected-by-the-php2shell-security-vulnerabilities-en/10783https://community.mobotix.com/t/mobotix-mxmanagementcenter-mxmc-is-not-affected-by-the-php2shell-security-vulnerabilities-en/10783Response evidence
  2. MOBOTIX: operating-company informationhttps://www.mobotix.com/de/impressumService and operation documentation
  3. https://community.mobotix.com/latesthttps://community.mobotix.com/latestService and operation documentation

MOBOTIX HUB

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

HUB and the official plug-ins listed in the notice are unaffected.

Scope: Includes the named Forensic Search, Thermal, SYNC, CLOUD Support, Camera Configuration, NurseAssist, Softbuttons, Discovery, DualVision, Fisheye and Imaging Pro plug-ins; excludes third-party extensions.

What users should do

No action for these vulnerabilities; continue routine updates.

Source URLs

  1. https://community.mobotix.com/t/mobotix-hub-is-not-affected-by-the-php2shell-security-vulnerabilities-en/10781https://community.mobotix.com/t/mobotix-hub-is-not-affected-by-the-php2shell-security-vulnerabilities-en/10781Response evidence
  2. MOBOTIX: operating-company informationhttps://www.mobotix.com/de/impressumService and operation documentation
  3. https://community.mobotix.com/latesthttps://community.mobotix.com/latestService and operation documentation

MOBOTIX ONE

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

ONE camera firmware uses no PHP and is unaffected.

Scope: ONE cameras only; excludes other series and recording NAS.

What users should do

No action for these vulnerabilities; continue routine updates.

Source URLs

  1. https://community.mobotix.com/t/mobotix-one-kameras-sind-nicht-von-den-php2shell-sicherheitslucken-betroffen-de/10798https://community.mobotix.com/t/mobotix-one-kameras-sind-nicht-von-den-php2shell-sicherheitslucken-betroffen-de/10798Response evidence
  2. MOBOTIX: operating-company informationhttps://www.mobotix.com/de/impressumService and operation documentation
  3. https://community.mobotix.com/latesthttps://community.mobotix.com/latestService and operation documentation

MOBOTIX 7

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

MOBOTIX 7 camera firmware uses no PHP and is unaffected.

Scope: MOBOTIX 7 cameras only; excludes other series and recording NAS.

What users should do

No action for these vulnerabilities; continue routine updates.

Source URLs

  1. https://community.mobotix.com/t/mobotix-7-kameras-sind-nicht-von-den-php2shell-sicherheitslucken-betroffen/10799https://community.mobotix.com/t/mobotix-7-kameras-sind-nicht-von-den-php2shell-sicherheitslucken-betroffen/10799Response evidence
  2. MOBOTIX: operating-company informationhttps://www.mobotix.com/de/impressumService and operation documentation
  3. https://community.mobotix.com/latesthttps://community.mobotix.com/latestService and operation documentation
Related official sources
  1. MOBOTIX: PHP vulnerability responseOfficial notice
  2. MOBOTIX: operating-company informationOfficial information directory

Comments