HMS puts a lot of effort into developing secure and robust solutions and keeping your data safe is always our top priority. On our security pages you can find current security advisories and report vulnerabilities or incidents.
| Date | HMS brand | File | CVE | Product / versions | Size | |
|---|---|---|---|---|---|---|
|
30 Oct 2026
|
HMS | HMS Security Advisory - 2026-10-29-003 Anybus-Wireless-PHP-Vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 254.5 KB |
4a87086d-a551-4d11-9dee-976036150ada
Download
|
|
|
30 Oct 2026
|
HMS | HMS Security Advisory - 2026-10-29-004 IPC-CHIP-SCxxx-PHP-Vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 335.4 KB |
a881aab4-d3c9-4ea9-a021-0b0d8a1054f8
Download
|
|
|
The PHP Foundation disclosed two critical vulnerabilities allowing unauthenticated RCE (Remote Code Execution).
|
HMS | HMS Security Advisory - 2026-10-29-002 - PHP Vulnerabilities | CVE-2026-109618, CVE-2026-109619 & CVE-2026-109618 | 246.5 KB |
3dcd3744-3990-48c9-87c2-bde97a1fe915
Download
|
|
|
29 Oct 2026
|
PEAK | HMS Security Advisory HMS-2026-10-29-001 – PEAK-System Products: PHP Vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 140.1 KB |
49f83651-fcb8-4393-be4f-d74aaed4f66d
Download
|
|
|
27 Oct 2026
|
Ixxat | HMS Security Advisory HMS-2026-10-26-001 – Ixxat Products: PHP Vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 137.6 KB |
2f1a477a-c6cf-4a4c-8eb5-bc49c244b24a
Download
|
|
|
The PHP Foundation disclosed two critical vulnerabilities allowing unauthenticated RCE (Remote Code Execution).
|
HMS | HMS Security Advisory 2026-10-22-002 - Netbiter and Argos PHP vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 233.0 KB |
acf3abae-0685-4eb7-9872-2d0390c5e6e7
Download
|
|
|
23 Oct 2026
|
HMS | HMS Security Advisory Anybus Gateways - PHP vulnerability | CVE-2026-109618, CVE-2026-109619 | 264.7 KB |
f6bb952c-9b66-4116-9b2a-aca228cd59c7
Download
|
|
|
23 Oct 2026
|
HMS | HMS Security Advisory Anybus Embedded and IXXAT INpact - PHP Vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 283.2 KB |
c02acc0d-d4c8-40f4-bff2-503ba20fa9db
Download
|
|
|
PHP disclosed two critical vulnerabilities allowing unauthenticated RCE (Remote Code Execution).
|
HMS | HMS Security Advisory 2026-10-22-001 - Talk2m, Ewon Flexy and Cosy PHP vulnerabilities | CVE-2026-109618, CVE-2026-109619 | 274.7 KB |
f4210d1f-c138-4cde-965c-b2a911135a6e
Download
|
|
|
Security researchers have discovered several vulnerabilities in the 700/7000 devices.
|
HMS | HMS Security Advisory 2025-06-02-001 - 700/7000 N-Tron Switches Vulnerabilities | CVE-2026-32645, CVE-2026-39460, CVE-2026-28745, CVE-2026-33367, CVE-2026-29797, CVE-2026-39453, CVE-2026-33272 | 312.6 KB |
a7e139f3-b155-402b-b644-626c9011c2de
Download
|
|
|
PCAN Windows Drivers - Affected products: PEAK-System Device Driver Setup ( 5.1.2.1151 and prior), PCAN Windows CAN device drivers (5.1.2 and prior)
|
PEAK | HMS Security Advisory HMSSAR-2026-10-19-001 - PCAN Windows Drivers | CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-105960 | 11.7 KB |
5b5d26a4-c769-474c-bffe-4e33932901cb
Download
|
|
|
Security researchers have discovered several vulnerabilities present on the Flexy gateways. Internal analysis shows that the Cosy+ gateways are also affected.
|
HMS | HMS Security Advisory 2026-03-09-001 - Ewon Several Flexy and Cosy Vulnerabilities | CVE-2026-25817, CVE-2026-25818, CVE-2026-25819, CVE-2026-25823 | 71.9 KB |
c4f6613f-ec62-45c3-b0cb-7374d1f5d48a
Download
|
|
|
The Radio Equipment Directive contains cybersecurity requirements for all products containing radio equipments (like WiFi, 4G, Bluetooth, etc). These requirements become applicable from August 1st, 2025.
|
HMS | HMS Security Advisory - 2025-07-09-001- RED for Ewon Products | 2025-07-09-001 | 75.4 KB |
8dcfafd0-7d8b-425b-ae2c-64376249410a
Download
|
|
|
Ewon Cosy & Flexy transmit user credentials in clear text with no encryption when a user is added, or user credentials are changed via its web page.
|
HMS | HMS Security Advisory 2025-02-07 - Recommendations to Protect the Ewon Gateways Credentials | CVE-2025-0432 | 86.2 KB |
09f6003e-5108-47ad-9fe8-c3d21f95726d
Download
|
|
|
An independent researcher has discovered a vulnerability that could allow an attacker to sniff and decode credentials. CVE-2024-7755 has been assigned to this vulnerability.
|
HMS | HMS Security Advisory 2024-10-22-001 – Flexy 20x Insufficiently Protected Credentials | CVE-2024-7755 | 78.4 KB |
c163abf9-278a-4b11-ad28-189d08d7bf08
Download
|
Subscribe to cybersecurity updates by registering to our CDIS (Customer and Distributor Information System).
