{
    "document": {
        "category": "csaf_security_advisory",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE",
                "url": "https://www.first.org/tlp/"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "summary",
                "title": "Summary",
                "text": "All Behnke ControlCenter up to version 1.0.497435 ships a PHP runtime affected by CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0: 9.2). An unauthenticated attacker with network access to the web interface may execute arbitrary code on the device.\n\nPublic proof-of-concept exploits exist, and exploitation attempts against internet-facing PHP installations have been reported. We are not aware of any exploitation of the Behnke ControlCenter at the time of publication."
            }
        ],
        "publisher": {
            "category": "vendor",
            "name": "Telefonbau Behnke GmbH",
            "namespace": "https://behnke.support",
            "contact_details": "https://security.behnke.support"
        },
        "references": [
            {
                "category": "self",
                "summary": "Canonical URL",
                "url": "https://behnke.support/.well-known/csaf/white/2026/behnke-sa-2026-0001.json"
            },
            {
                "category": "external",
                "summary": "Advisory page",
                "url": "https://behnke.support/security/advisories/BEHNKE-SA-2026-0001"
            }
        ],
        "title": "Critical PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619)",
        "tracking": {
            "current_release_date": "2026-11-06T15:20:01+00:00",
            "generator": {
                "engine": {
                    "name": "Behnke Compliance Engine"
                }
            },
            "id": "BEHNKE-SA-2026-0001",
            "initial_release_date": "2026-10-23T09:29:01+00:00",
            "revision_history": [
                {
                    "date": "2026-10-23T09:29:01+00:00",
                    "number": "1",
                    "summary": "Initial version"
                },
                {
                    "date": "2026-11-04T15:15:00+00:00",
                    "number": "2",
                    "summary": "Initial version"
                },
                {
                    "date": "2026-11-05T09:00:01+00:00",
                    "number": "3",
                    "summary": "Initial version"
                },
                {
                    "date": "2026-11-06T15:20:01+00:00",
                    "number": "4",
                    "summary": "Initial version"
                }
            ],
            "status": "final",
            "version": "4"
        }
    },
    "product_tree": {
        "branches": [
            {
                "category": "vendor",
                "name": "Telefonbau Behnke GmbH",
                "branches": [
                    {
                        "category": "product_name",
                        "name": "Behnke ControlCenter",
                        "branches": [
                            {
                                "category": "product_version",
                                "name": "1.0.491941",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.491941",
                                    "product_id": "behnke-control-center-1.0.491941"
                                }
                            },
                            {
                                "category": "product_version",
                                "name": "1.0.494577",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.494577",
                                    "product_id": "behnke-control-center-1.0.494577"
                                }
                            },
                            {
                                "category": "product_version",
                                "name": "1.0.494723",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.494723",
                                    "product_id": "behnke-control-center-1.0.494723"
                                }
                            },
                            {
                                "category": "product_version",
                                "name": "1.0.497435",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.497435",
                                    "product_id": "behnke-control-center-1.0.497435"
                                }
                            },
                            {
                                "category": "product_version",
                                "name": "1.0.497965",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.497965",
                                    "product_id": "behnke-control-center-1.0.497965"
                                }
                            },
                            {
                                "category": "product_version",
                                "name": "1.0.498277",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.498277",
                                    "product_id": "behnke-control-center-1.0.498277"
                                }
                            },
                            {
                                "category": "product_version",
                                "name": "1.0.498295",
                                "product": {
                                    "name": "Behnke ControlCenter 1.0.498295",
                                    "product_id": "behnke-control-center-1.0.498295"
                                }
                            }
                        ]
                    }
                ]
            }
        ]
    },
    "vulnerabilities": [
        {
            "title": "Critical Remote Code Execution Vulnerabilities in PHP Runtime (CVE-2026-109618, CVE-2026-109619)",
            "ids": [
                {
                    "system_name": "Behnke vulnerability register",
                    "text": "VUL-2026-0001"
                }
            ],
            "notes": [
                {
                    "category": "description",
                    "title": "Description",
                    "text": "The Behnke ControlCenter up to version 1.0.497435 ships a PHP runtime affected by CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0: 9.2). An unauthenticated attacker with network access to the web interface may execute arbitrary code on the device.\n\nPublic proof-of-concept exploits exist, and exploitation attempts against internet-facing PHP installations have been reported. We are not aware of any exploitation of the Behnke ControlCenter at the time of publication.\n\nRemediation: Update to version 1.0.497965 or later. Until then, do not expose the web interface to the internet."
                }
            ],
            "product_status": {
                "fixed": [
                    "behnke-control-center-1.0.497965"
                ],
                "known_affected": [
                    "behnke-control-center-1.0.494577",
                    "behnke-control-center-1.0.494723",
                    "behnke-control-center-1.0.497435",
                    "behnke-control-center-1.0.491941"
                ]
            },
            "remediations": [
                {
                    "category": "vendor_fix",
                    "details": "Update to version 1.0.497965 or later. Until then, do not expose the web interface to the internet.",
                    "product_ids": [
                        "behnke-control-center-1.0.494577",
                        "behnke-control-center-1.0.494723",
                        "behnke-control-center-1.0.497435",
                        "behnke-control-center-1.0.491941"
                    ]
                }
            ]
        }
    ]
}