Skip to content
NoticeAWS reports broad exploitation attempts against php2shell in the wild (update of 22 Oct). If your PHP is not on a fixed version, update now.Details
Critical CVE-2026-109618 · CVE-2026-109619/ CVSS 9.2 / Disclosed 2026-10-21 Last updated

Terms of use

Information only

php2shellcheck gives general information. A result is not a guarantee that a system is safe or vulnerable. Follow your vendor's security advisory and test your own systems.

Your own systems

Use this site only for systems you own or are responsible for.

No warranty

The site is provided as is. We work to keep the data accurate and show when each record was checked, but we are not liable for decisions made from it.

Paid patch plan

The $49 personal patch plan is written instructions sent by email; we never log in to your server. Until your plan is sent you can get a full refund. After it is sent the payment is not refundable. If the plan does not apply to your environment, we revise it once, free of charge.

If you are a consumer in the EU or the EEA, you have a 14-day right of withdrawal. Because the plan is a digital service, at checkout you expressly ask us to start right away and acknowledge that you lose the right of withdrawal once the plan has been sent in full. Until then you can still get a full refund, as described above.

This policy does not affect your statutory rights as a consumer.

Refund policy

Operator

Operated by Zane.