Login

Register now
Choose Country & language

Search
Your search yielded no results in your current section
Please enter search term
Your search yielded no results in your current section

  • Home page
  • Customer Service
  • Service & Support
  • Cybersecurity and Information Security

Cybersecurity and Information Security

At KARL STORZ, we always focus on the well-being of the patient and the best possible support for the doctor. As soon as this goes hand in hand with information processing, it is also associated with security risks that can occur in our products and services as well as in connected information infrastructures despite all due care. Transparency creates trust here.

Statement regarding the PHP2SHELL vulnerability

We are aware of reports concerning the PHP vulnerability commonly referred to as “PHP2SHELL” (CVE-2026-109618 & CVE-2026-109619) and have assessed its potential impact on our products.

Based on our current assessment, our products are not affected by this vulnerability, as PHP is not used in KARL STORZ products. Consequently, the prerequisite for exploitation of this PHP-specific vulnerability is not present.
No customer action related to this vulnerability is required for our products.

We continue to monitor relevant cybersecurity vulnerabilities and assess their potential impact on our products as part of our established product security processes.
We will update this notice here in case our assessment changes.
 

Coordinated Vulnerability Disclosure and Incident Reporting

KARL STORZ maintains a global network of product security officers who design, develop and deploy state-of-the-art security and privacy capabilities for our products and services, and handle security incidents in a risk-oriented manner.

Product security requirements are embedded in the KARL STORZ Security Framework, which is derived from ISO27001, NIST CSF and relevant industry standards.

KARL STORZ supports coordinated vulnerability disclosure and encourages vulnerability testing by security researchers and customers who responsibly report them to KARL STORZ.

If you have discovered potential security and privacy vulnerabilities in our products, services or infrastructure associated with KARL STORZ, please notify us via the following email address:

Please inform us about your findings as descriptive as possible.

For joint processing, we are guided by the recommendations of FIRST.org (https://www.first.org/global/sigs/vulnerability-coordination/multiparty/guidelines-v1.1)

Security Advisories

Known security vulnerabilities may also affect our products. You can find our related security advisories here: