We use cookies on our website to provide you with the best possible service and to further improve our website. By clicking the "Accept All" button, you agree to the use of all cookies. You can limit the cookies used by clicking on "Accept selection". Further information and an option to revoke your selection can be found in our privacy policy.

Necessary:

These cookies are necessary for basic functionality. This allows you to register on our website and forum or order products with our online shop.

Statistics:

With these cookies, we collect anonymized usage data for our website. For example, we can see which content is interesting for our visitors and which resolutions are used. We use the information to optimize our website to provide you with the best possible user experience.

Necessary
Statistics

show more

Accept All Accept Selection

Gateway Updates Close PHP Vulnerabilities

• We have released new software versions for the PCAN-Ethernet Gateway DR and the PCAN-Ethernet Gateway FD DR.


News PCAN Gateway SoftwareUpdate

The updates include PHP 8.3.36 and close the critical vulnerabilities CVE-2026-109618 and CVE-2026-109619, which were published on October 21, 2026.

The vulnerabilities, also known as “PHP2Shell,” affect PHP installations that serve web requests. They can allow an attacker to execute code remotely without authentication. On the PCAN-Ethernet Gateways, PHP runs the configuration website. We recommend installing the update on all affected devices immediately.

Affected products and new software versions:

  • IPEH-004010 PCAN-Ethernet Gateway DR (serial numbers 25000 to 28999 and from 31000): PCAN-Gateway Software 3.0.3
  • IPEH-004010 PCAN-Ethernet Gateway DR (serial numbers 1 to 24999 and 29000 to 30999): PCAN-Gateway Software 2.11.4
  • IPEH-004012 PCAN-Ethernet Gateway FD DR: PCAN-Gateway FD Software 1.3.5

You can install the update through the device’s configuration website under Device > Software Update. The version histories and download links are on our support pages.