New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

T2Covered by 1 source · first reported by Help Net Security at 22 Oct, 12:03 UTC

Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP applications running on Apache…