Skip to content
OpenAdvisories
Medium 1 exploited CVE VDE-2026-152 1 CVE

Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT affected by PHP vulnerability

Published Nov 10, 2026 · Updated Nov 10, 2026

Vendor: PHP Group Vendor: Weidmueller Product: IE-SR-4GT Product: IE-SR-4GT-LTE/4G-EU Product: IE-SR-4GT-LTE/4G-USEMEA Product: IE-SR-4GT-LTE/4G-USEMEA-M Product: IE-SR-4GT-M Product: IE-SR-4TX Product: IE-SR-4TX-LTE/4G-EU Product: IE-SR-4TX-LTE/4G-USEMEA Product: PHP

Summary

The Weidmueller security routers IE-SR-4TX and IE-SR-4GT in firmware releases prior to 2.3.4 bundle a PHP version that is affected by CVE-2026-109618. In the configuration used by the products, the vulnerability can allow an attacker to cause a denial of service by making the web interface temporarily unavailable. All other functions (Routing, Firewall etc.) are not affected. It is fixed in firmware 2.3.4. CVE-2026-109619, which was published together with CVE-2026-109618, does not affect the products.

Details

Impact
An unauthenticated remote attacker with network access to the web interface can make it temporarily unavailable. Confidentiality and integrity are not affected; only availability of the web interface is impacted.

Mitigation
Restrict access to the web interface to trusted networks.

Remediation
Update to version 2.3.4 or later.

| Product | Article Number | Firmware File Name | Affected Version | Fixed Version |
|---|---|---|---|---|
| IE-SR-4TX | 2751270000 | Firmware_IE-SR-4TX_series | <2.3.4 | 2.3.4 |
| IE-SR-4TX-LTE/4G-EU | 2751280000 | Firmware_IE-SR-4TX_series | <2.3.4 | 2.3.4 |
| IE-SR-4TX-LTE/4G-USEMEA | 2739630000 | Firmware_IE-SR-4TX_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT | 2873910000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-LTE/4G-EU | 2873920000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-LTE/4G-USEMEA | 2873930000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-M | 2990450000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-LTE/4G-USEMEA-M | 2990440000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |

Vulnerabilities 1

  • Critical 9.2
    CVE-2026-109618 Exploited Public exploit Scanner template EPSS 100%

    RCE via OOM corruption

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026

Revision history

  1. #1.0.0

    Initial version

References