Skip to Content

N530 - Release 2.71.1

Release Date

  • October 2026
Information

Following a recent security advisory regarding critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), we recommend updating all affected Gigaset DECT IP PRO systems to firmware version 2.71.1

What is new?

  • Unauthenticated Remote Code Execution in Embedded PHP Runtime ("php2shell", CVE-2026-109618 / CVE-2026-109619) on Gigaset Nx70 IP PRO Device
  • Web-interface:
  • A new - Mobile device status page
    • Battery level
    • In/out of Charger
    • Provisioning status
      • "Provisioned: <X time> ago"
      • "Scheduled: <X time> ago"
      • "Internal error"
      • "Invalid URL"
      • "File download failed"
      • "Invalid file"
      • "Resource download failed"
      • "Battery too low"
      • "Cancelled by user"
      • "Feature not supported" <- shown if mobile device does not support provisioning at all
      • "Mobile device was offline" <- shown if mobile device was offline at the time of the trigger (shown even with older HS FW)
      • "XML file too big"
    • SUOTA status
      • "Firmware up to date" <- shown if HS FW is equal/newer than matching SUOTA package (shown even with older HS FW)
      • "Update available" <- shown if HS FW is older than matching SUOTA package (shown even with older HS FW)
      • "Scheduled: <X time> ago"
      • "Internal error"
      • "File download failed"
      • "Invalid file"
      • "Battery too low"
      • "Cancelled by user"
      • "Feature not supported" <- shown if mobile device does not support SUOTA at all
      • "Mobile device was offline" <- shown if mobile device was offline at the time of the trigger (shown even with older HS FW)
  • Start easy provisioning

  • Mobile Devices Search - add SUOTA window, provisioning, PTT

Improvements

  • Data Act requirements
  • Web-interface: STATUS - Statistics, new  Support page
    • Customer support with link to the wiki
    • Information - License terms
    • Data protection and information security with option to download device data

Bugfixes

  • Outgoing call start to wrong server
  • Base/DM Web UI is not accessible when plain-text password is set via provisioning
  • General improvements

  • DHCP 66: %MACD in provisioning URL not working

Downloads

Firmware file DECT systemFile size (KB)MD5Download link
N53049.3311885cf61cc4f97ef2485aa6e149bb198GigasetN530-V2.71.1.bin
For testing upgrade/downgrade   
N530 fake software image (for testing upgrade)49.3310eb67b6118b878e730d990beb94b8c52Gigaset-N530-V999.71.1-build.99fe7e9.update.bin