Security Notice¶
RansNet publishes a security notice when a critical vulnerability affects RansNet products. Each notice lists the affected models and versions, whether you need to act, and what RansNet recommends.
Current Notices¶
| Date | Notice | Severity | Affected Products | Status |
|---|---|---|---|---|
| 22 Oct 2026 | PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619) | Critical | mFusion, HSG and LOG Series | Fixed in 20261022-2200 |
How to Read a Notice¶
Each notice follows the same structure:
- Summary — The vulnerability, its severity and its CVE identifiers
- Affected Products — Which models and software versions are affected, and which are not
- Recommended Actions — What to do, and how RansNet support can help
- Interim Mitigation — Steps that reduce exposure until the fix is applied
- Verification — How to confirm a unit is fixed
A product that is not listed in a notice is not affected by that vulnerability.
Reporting a Vulnerability¶
If you believe you have found a security issue in a RansNet product, contact RansNet support through the RansNet contact page. Include the product model, the firmware version (show version) and a description of the issue. Please do not disclose the issue publicly until RansNet has released a fix.
Security Best Practices¶
- Keep firmware current — Install the latest firmware from the release notes during regular maintenance windows.
- Limit management access — Allow the web management portal only from trusted management networks, never from the whole Internet.
- Use strong credentials — Change default passwords and use unique passwords per device.
- Check this page regularly — New notices are added here as soon as RansNet has assessed a vulnerability.