PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
Yes, dedicated tools and web checkers have been released specifically for the PHP2Shell (CVE-2026-109618 / CVE-2026-109619) vulnerabilities.
Because standard “malware scanners” (like Sucuri) only look at browser-level code and cannot see server-side engine bugs, security researchers built precise deep-testing tools: [1, 2, 3]
🚀 Public Tools & Scanners
- Assetnote PHP2Shell Scanner (via GitHub): This is the most accurate, high-fidelity tool released to the public. Unlike generic scanners that just guess by reading the server’s public PHP version text, this tool actively tests the vulnerability. It sends controlled, deeply-nested web requests to trigger a tiny memory exhaustion event on purpose to see if your server breaks or handles it securely. [1, 2]
- Pentest-Tools.com PHP2Shell Scanner: A web-based network vulnerability tool that runs a free remote check on your site’s target IP specifically to look for the underlying PHP configuration weaknesses. [1]
- AI Heroes PHP Version Check: A simple, free web portal where you can type in your URL to scrape and analyze whether your site is visibly broadcasting an out-of-date or vulnerable PHP version branch. [1]
🔒 Enterprise Protection Systems
If you operate cloud infrastructure or manage a large enterprise portfolio, major platforms have integrated active detection modules:
- Palo Alto Networks Cortex & Prisma: Their supply chain portals scan application images inside your registries and live container environments to flag vulnerable versions. [1]
- CrowdStrike Falcon Platform: They rolled out SIEM correlation rules designed to watch web server logs for the unique signature of the exploit (specifically tracking fatal startup memory exhaustion patterns hidden behind
"Unknown on line 0"errors). [1]
Geef een reactie