Important Security Notice

Valcom recently identified a security vulnerability in certain versions of its on-premise software products. Upon discovery, Valcom immediately conducted a thorough internal investigation.

We found no evidence that Valcom systems, software, or user data have been compromised. Valcom developed and is now making available a corrective software patch that addresses the identified vulnerability. Valcom is communicating this notice as part of its ongoing commitment to the security of its customers’ systems and data.

This notice applies to customers operating the following on-premise software products:

  • Interactive Console version 5.4.12 and earlier versions;
  • Building Communication Panel 5.4.12 and earlier versions;
  • Emergency Communication Panel 5.4.12 and earlier versions;
  • Site Manager version 6.5.2 and earlier versions; and,
  • IP6K Headend version 1.23.3 and earlier versions.

ACTION REQUIRED: Customers running or hosting the on-premise software products identified above must update to the latest version consistent with their standard response procedures, but no later than May 26, 2026. Because these are on-premise installations, Valcom is unable to apply this update remotely. This update requires customer action. The patches and installation instructions are available below or by contacting Valcom support at systemsupdate@valcom.com.

To help enable a smooth upgrade, please reference the following:

Valcom identified this vulnerability through its own proactive internal security testing and is acting promptly to make this corrective patch available. We strongly encourage all affected customers to apply this update consistent with their standard response procedures, but no later than May 26, 2026. Customers who obtained this software through a reseller or distributor are encouraged to contact their reseller for installation assistance. For additional questions, please contact Valcom at systemsupdate@valcom.com or 540-563-2000.

Valcom is continually improving our ability to proactively identify and notify you of vulnerabilities in our software.