We are aware of the recently reported PHP vulnerabilities and want to provide an update on our assessment and remediation efforts.
Our team immediately conducted an assessment of our products and determined that the vulnerabilities affect only our pre-UHD592 SDI hardware, as well as our legacy CaptionCast service. Our other products do not use PHP and are not affected.
To address the issue, our team has already prepared patches for nearly all active affected models. We are prioritizing testing and validation to ensure the patches can be deployed as quickly as possible while maintaining the reliability and performance you expect from our products.
We take the security of our products and our customers' systems seriously and are committed to resolving this issue promptly. We will provide further updates as testing progresses and deployment plans are finalized.
A gentle reminder to avoid putting your AI Media appliances on public IP addresses, to limit access to users on your LAN. Traffic between your appliances and our LEXI cloud is initiated via outbound traffic and does not require the devices be reachable from the Internet.
Thank you for your continued trust in our team. If you have any questions or concerns, please contact our team at eeg.support@ai-media.tv
Posted Oct 22, 2026 - 16:01 UTC
This incident affects: iCap, Lexi, Falcon, EEGCloud (Accounts and Billing), Cloud Licensing, Live Booking Portal, Recorded Cloud (Customer Portal - access from Australia, Customer Portal - access from Europe, Customer Portal - access from America, Agent Portal - access from Australia, Agent Portal - access from Europe, Agent Portal - access from America, Orders API - AU region, Orders API - EU region, Orders API - US region), and Ai-Live (Platform - AU Region, Platform - US Region, Platform - EU Region).