PHP Information

Dallmeier Cameras and Recording Systems Are Not Affected

In light of the recently disclosed critical PHP security vulnerability “php2shell,” Dallmeier has reviewed its product portfolio.
The good news: None of Dallmeier’s network cameras or recording systems are affected—this also applies to older product generations.

No Risk to the Following Dallmeier Products
Since PHP is not used in the following products, there is no risk posed by “php2shell”:

• All Dallmeier network cameras
• All Dallmeier recording systems
• CAT Server and external AI servers
• SeMSy® Compact
• SMAVIA Viewing Client
• Dallmeier Device Manager
• DMVC Apps (iOS and Android)
• SeMSy® III Video Management System

HEMISPHERE® Geo-Module: Measures Already Implemented

During the review, it was determined that the optional Geo module of the HEMISPHERE® platform uses a PHP component that may be affected.
As a precautionary measure, Dallmeier recommends temporarily disabling the Geo module. Work is already underway on a corresponding security update.

Since the module is used exclusively in projects directly managed by Dallmeier, affected customers and partners are being proactively contacted. The responsible project teams are coordinating the necessary measures.

Check the Security of Other System Components

Since PHP is widely used, products from other manufacturers may also be affected. We therefore recommend checking servers, network components, and third-party cameras in particular for relevant security advisories from their respective manufacturers.

Further information on the vulnerabilities:

• CVE-2026-109618
• CVE-2026-109619

If you have any questions, please feel free to contact your usual Dallmeier representatives.