Critical PHP and Node.js flaws php2shell + node2shellCritical flaws in the PHP and Node.js cores php2shell + node2shell, are your servers affected?Test my domain

NODE2SHELL SCAN · CVE-2026-111497

Is your Node service exposed?

Check for node2shell (CVE-2026-111497), the Brotli decoder flaw in Node.js

Flawfence: node2shell scan

Enter your Node.js service domain

··Authorisation log kept for 12 months

Understand the flaw involved

node2shell (CVE-2026-111497)php2shell (CVE-2026-109618, CVE-2026-109619)