Ruckus has published a security bulletin on two critical PHP flaws, and the short answer for ICX switch owners is that Ruckus says the products it evaluated are not vulnerable. The bulletin is still worth a look, because its product list carries something more useful: the FastIron release Ruckus currently recommends for each ICX family. This post covers what the bulletin says, the recommended release for each family we sell, the end of sale note on the ICX 7150, and what the maker's own descriptions say about each family.
What Ruckus published
The bulletin, ID 20261023, is titled "PHP Vulnerabilities and RUCKUS Products". It shows "Release Date: October 23, 2026 Edit Date: October 26, 2026", at version 1.1. Its description in full: "RUCKUS Networks is investigating two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, with a CVSS score of 9.2. Current assessment indicates that the evaluated RUCKUS products are not vulnerable."
The bulletin applies to a long list of Ruckus products, including the ICX 7150, 7250, 7450, 7550, 7650, 7750, 7850, 8100 and 8200 families. The list is broad: it also names Cloudpath, SmartZone and Unleashed products, access points and the IoT controller, so it is a list of the products the bulletin applies to, not a list of affected ones. There is no fix to install for this one. What it does give you is a current read of Ruckus's recommended software for each switch family, from the same page.
The FastIron release Ruckus recommends
| ICX family | Recommended FastIron release |
|---|---|
| ICX 7150 | 10.0.10g_cd11 |
| ICX 7250 | 08.0.95s |
| ICX 7450 | 08.0.95s |
| ICX 7550 | 10.0.10g_cd11 |
| ICX 7650 | 10.0.10g_cd11 |
| ICX 7750 | 08.0.95s |
| ICX 7850 | 10.0.10g_cd11 |
| ICX 8100 | 10.0.10g_cd11 |
| ICX 8200 | 10.0.10g_cd11 |
Each entry is listed as "RUCKUS ICX FastIron 10.0.10g_cd11 (GA) Software Release (.zip)" or "RUCKUS ICX FastIron 08.0.95s (GA) Software Release (.zip)" under the family's Recommended Software.
Read the table as two trains. The ICX 7250, ICX 7450 and ICX 7750 sit on 08.0.95s; the other families sit on 10.0.10g_cd11. If your network mixes, say, ICX 7450 access switches with an ICX 7850 core, expect to track and test two FastIron trains, not one. If you are buying, the family you pick decides which train you will be running.
What to do if you run ICX
- Nothing is needed for this bulletin itself: Ruckus says the evaluated products are not vulnerable.
- Compare the FastIron release on each switch with the table above. If a switch runs an older build of its family's train, plan the move to the recommended one in your next window.
- Keep an eye on the bulletin. It is at version 1.1 and the wording is "investigating", so Ruckus may update it.
The ICX 7150 is end of sale
The ICX 7150 entry carries a note: "NOTE: All ICX-7150 models are now End-of-Sale (EOS)." Ruckus still lists a recommended release for it, 10.0.10g_cd11. We covered what the end of sale means in an earlier post. For a network standardised on the ICX 7150, the practical step is the same as with any end of sale switch: hold spares of the exact models you run.
What Ruckus says each family is for
The same product list repeats Ruckus's own description of each family. The lines that matter most when choosing:
- ICX 7250. "It raises the bar with up to 8×10 GbE ports for uplinks or stacking and market-leading stacking density with up to 12 switches (576×1 GbE) per stack."
- ICX 7450. "It delivers market-leading stacking density with up to 12 switches (576 1 GbE and 48 10 GbE ports) per stack", and Ruckus says it was "the first in its class to offer 40 GbE uplinks".
- ICX 7550. "up to 48 ports of multigigabit connectivity and full 90 watts of 802.3bt PoE power per port", with "100 GbE uplinks".
- ICX 7750. "the Ruckus ICX 7750 supports 12-unit distributed chassis stacking or Multi-Chassis Trunking (MCT)".
- ICX 7850. "a high performance stackable core switch for next generation 100G campus", "with a switching capacity of up to 6.4 Tbps".
Put simply: the ICX 7250 and ICX 7450 are gigabit access switches, the ICX 7550 is the one for high power PoE and multigigabit, and the ICX 7750 and ICX 7850 are aggregation and core.
Buying ICX now
Match the family to the job first, then plan the FastIron train above. We have an ICX 7150, an ICX 7250, an ICX 7450, an ICX 7650 and an ICX 7850 in stock. The full range is on the ICX shelf, with the ICX 7150 and ICX 7450 on their own shelves.
When you ask for a quote, tell us the family and the FastIron release you need. For a side by side of the larger families, see our ICX switch guide, and the Brocade and Ruckus guide for the line.
