New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

Help Net Security5 d ago

Illustration · Vulnerability

Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP applications running on Apache mod_php or PHP-FPM und

Continue reading at Help Net Security →

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

More on this

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Microsoft Authenticator vulnerability let rogue Android apps steal work account access

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

71% of vulnerability exploitation starts within a week of disclosure