As cited
Copy frozen at (site build).
vulnerabilities
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619
Searchlight Cyber released php2shell-scanner, an open-source tool for testing exposure to CVE-2026-109618 and CVE-2026-109619, two critical PHP vulnerabilities patched on October 21. These remote code execution flaws affect PHP applications on Apache mod_php or PHP-FPM under default settings, with demonstrated attacks against WordPress, Drupal, Joomla, phpMyAdmin, Nextcloud, and Magento.
Why it matters: Any organization running PHP web applications should audit systems immediately using this scanner or apply patches, as pre-authentication remote code execution affects widely used software without requiring credentials.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619
Searchlight Cyber released php2shell-scanner, an open-source tool for testing exposure to CVE-2026-109618 and CVE-2026-109619, two critical PHP vulnerabilities patched on October 21. These remote code execution flaws affect PHP applications on Apache mod_php or PHP-FPM under default settings, with demonstrated attacks against WordPress, Drupal, Joomla, phpMyAdmin, Nextcloud, and Magento.
Why it matters: Any organization running PHP web applications should audit systems immediately using this scanner or apply patches, as pre-authentication remote code execution affects widely used software without requiring credentials.
- Source published
- First seen by Cybersecurity Tracker