BACHMANN IT PDUs not affected by current PHP security vulnerabilities

Stuttgart, October 2026 – In connection with the recently disclosed critical security vulnerabilities in the PHP programming language, BACHMANN is providing information on their impact on its product portfolio. Following a thorough review, BACHMANN can confirm that its intelligent IT PDUs in the BN2000, BN ESSENTIAL Metered, BN PRO and BN3000 to BN7500 families are not affected by the reported vulnerabilities.

Background to the current security incident

In connection with the recently disclosed critical security vulnerabilities in the PHP programming language (PHP2Shell, CVE-2026-109618 and CVE-2026-109619), numerous manufacturers and operators of web-based applications are providing information about the potential impact on their systems.

According to information from security authorities and the PHP project, under certain conditions the vulnerabilities may be exploited to execute malicious code on affected servers and are considered security-critical. Corresponding security updates have already been made available. (Source: BSI – German Federal Office for Information Security – Version 1.1: PHP – Critical vulnerabilities threaten web applications worldwide)

BACHMANN products are not affected

The BACHMANN IT PDUs in the BN2000, BN ESSENTIAL Metered, BN PRO and BN3000, BN3500, BN7000 & BN7500 families do not use PHP in their software architecture. Consequently, the recently disclosed vulnerabilities cannot affect either the devices themselves or their management and monitoring functions.

No action is required by operators of the affected product series. No additional security measures, software updates or patches are required in connection with the recently disclosed PHP security vulnerabilities. The systems can continue to be operated without modification. The security, availability and integrity of the BACHMANN IT PDU infrastructure remain fully ensured.

Questions and technical support

BACHMANN continuously monitors security-related developments and provides users with transparent information about potential impacts on products and systems.

If you have any questions about the current security incident or the security architecture of BACHMANN IT PDUs, the support team is available at any time at bluenet.support@bachmann.com.

Summary

• Critical security vulnerabilities have been disclosed in PHP.
• BACHMANN IT PDUs in the BN2000, BN ESSENTIAL Metered, BN PRO and BN3000 to BN7500 families are not affected. PHP is not used in the software of these products.
• No updates or patches are required.
• The security and availability of the systems remain fully ensured.
• For questions, the support team is available at bluenet.support@bachmann.com.