Bogen Communications is actively assessing the recently disclosed worldwide exposure to PHP vulnerabilities and their potential impact on Nyquist systems. This page will be updated as additional information and customer guidance become available.
Summary
In October 2026, two critical security vulnerabilities were discovered in PHP, a widely used programming language used throughout the world. If exploited, these vulnerabilities could allow remote attackers to execute malicious code on affected systems. This is a global cybersecurity issue impacting systems that use vulnerable PHP components.
Affected Nyquist Products and Solutions
Bogen is actively investigating the impact of CVE-2026-109618 and CVE-2026-109619 on Nyquist software and hardware appliances. We will provide updates as more information becomes available.
October 23, 2026: 11:52am
Bogen is aware of the widely reported PHP2SHELL vulnerability, a global cybersecurity issue that may affect Nyquist systems.
We are actively evaluating the situation and developing our response. Addressing this issue will require an upgrade to software version 10 or 11, or an applicable patch for those versions. Access to the updated software currently requires an active Software Upgrade Subscription (SUS).
We are working to finalize the technical details and upgrade requirements. Additional information will be provided by 4pm EST today.
We appreciate your patience as we work to address this issue and provide customers with clear guidance on next steps.