Critical PHP vulnerabilities fixed for monitoring devices

We have fixed two critical PHP vulnerabilities (PHP2SHELL) affecting our monitoring devices RF-DAB, RF-SE, RF-FM, and RF-AM: CVE-2026-109618 and CVE-2026-109619. Both vulnerabilities are rated 9.2 (Critical) on the CVSS severity scale and could enable serious security impacts under specific conditions.

A new firmware version V3.4.2 containing the security fixes is now available. Customers should update their devices to this firmware as soon as possible to ensure continued secure operation. After the update, all monitoring functions will operate normally. No additional configuration changes are required. Please contact your preferred contact at RFmondial or support@rfmondial.de to receive the new firmware.

All other RFmondial (modulators, exciters, DECT-NR+ boards) products are not affected.