Critical PHP flaw php2shell (CVE-2026-109618)Test my domain
PHP2SHELL SCAN · CVE-2026-109618 · CVE-2026-109619

Is your server exposed to php2shell? 

We read the PHP version your server advertises and place it in the affected range. No payload sent.

Flawfence: php2shell scan

Enter your domain to start the analysis

Authorisation log kept 12 months