Advisories

Security advisories

Every security and product advisory Behnke has published. Withdrawn advisories stay visible and are marked.

1–2 of 2

  • BEHNKE-SA-2026-0003 Medium

    Vulnerability in the Linux kernel of Behnke Station and Behnke ControlCenter (CVE-2026-98432)

    A vulnerability (CVE-2026-98432) has been identified in the networking code of the Linux kernel used by Behnke Station and Behnke ControlCenter. When a TCP connection is established over IPv4, IP options can be freed while the kernel still accesses them (use-after-free). An attacker who can send specially crafted network packets to the device may, in the worst case, read information, corrupt memory or crash the device.

    Affected products
    Behnke ControlCenter, Behnke Station
    Kind
    Security advisory
    Published
    Read the full advisory →
  • BEHNKE-SA-2026-0001 Medium

    Critical PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

    All Behnke ControlCenter up to version 1.0.497435 ships a PHP runtime affected by CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0: 9.2). An unauthenticated attacker with network access to the web interface may execute arbitrary code on the device.

    Affected products
    Behnke ControlCenter
    Kind
    Security advisory
    Published
    Read the full advisory →