News Minimalist

All news ranked by significance

Astra Security releases free tools to detect PHP2Shell vulnerabilities

scotsman.com — October 23, 2026 at 04:01 PM UTC

Astra Security released two free tools to help organizations assess exposure to the critical PHP2Shell vulnerabilities disclosed this week, supporting detection and remediation efforts. The public-facing PHP2Shell Checker compares a website's apparent PHP version against fixed releases, while the open-source php2shell-triage script examines running PHP workers for stale or vulnerable binaries. Both vulnerabilities, CVE-2026-109618 and CVE-2026-109619, carry a CVSS score of 9.2 and enable unauthenticated remote code execution. Patches are available in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Astra notes proxies and server configurations can hide version information, and clean results don't cover internal systems. Organizations running end-of-life PHP versions, including 8.1 and earlier, must plan upgrades as no official fixes exist. Where compromise is suspected, evidence should be collected before restarting systems.

With a significance score of 2, this news ranks in the top 20% of today's 28732 analyzed articles.

Get summaries of news with significance over 5.5 (usually ~10 stories per week). Read by 10,000+ subscribers:

Astra Security releases free tools to detect PHP2Shell vulnerabilities | News Minimalist

Most significant articles on this story:

[6.0]

AI Tools Unearth PHP Flaws, Spark Rapid Exploitation (wired.com)

1d 2h

Link Source [$]

[6.0]

AI-powered hacking era begins after critical PHP bug found (theguardian.com)

1d 19h

[6.0]

Global PHP flaws trigger urgent security response (cnbc.com)

1d 23h

[5.9]

AI turns 22-year-old PHP vulnerability into a two-day crisis (cnnespanol.cnn.com)

1d 22h

Link Source (Spanish)

[5.8]

AI-assisted discovery exposes internet's fragile PHP foundation (techcrunch.com)

18h

[5.7]

AI exposes decades of human coding flaws, sparking repair push (businessinsider.com)

1d 5h

[5.7]

AI Agents Discovered a Decade-Old PHP Flaw That Posed a Major Web Security Risk (time.com)

1d 17h

[5.6]

How a PHP Flaw Disclosure Sparked a Global Cybersecurity Panic (businessinsider.com)

1d 1h

[5.4]

PHP powers 70% of websites – a flaw in the software exposes millions to hackers (theconversation.com)

1d 20h

[5.4]

AI-driven security flaws expose global internet vulnerabilities (hindustantimes.com)

1d 3h

[5.3]

PHP bugs expose widespread web vulnerability (techcrunch.com)

23h

[5.0]

Critical PHP flaw threatens 70% of websites, emergency patches issued (business-standard.com)

5h

[5.0]

PHP flaw in 70% of websites sparks global patch race (fortune.com)

1d 17h

[5.0]

PHP flaws trigger global cybersecurity alert and website shutdowns (biobiochile.cl)

1d 14h

Link Source (Spanish)

[5.0]

PHP AI-Discovered Flaw Sparks Global Cyber Alert (adevarul.ro)

23h

Link Source (Romanian)

[4.9]

AI software bug discovery raises outage risk, experts warn (business-standard.com)

1d 21h

[4.9]

AI-Driven Flaw Discovery Set to Disrupt Systems in Coming Months (timesofindia.indiatimes.com)

1d 20h

[4.9]

Cloudflare CEO warns of years of AI-driven security crises after PHP flaw (pcgamer.com)

1d 19h

[4.9]

PHP Flaw Exposes Global Web Vulnerabilities (okinawatimes.co.jp)

1d 19h

Link Source (Japanese)

[4.6]

AI security expert warns software vulnerabilities will worsen for 18 months (nettavisen.no)

1d 16h

Link Source (Swedish)

[4.6]

AI-discovered PHP flaws expose urgent need for faster patching (khaleejtimes.com)

1h

[4.5]

3 steps to protect your website from critical PHP attacks (businessinsider.com)

1d 20h

[4.4]

New York government sites patch critical PHP security flaw (spectrumlocalnews.com)

1d 17h

[4.4]

PHP Foundation operates with one full-time staff member, director says (reuters.com)

1d 16h

Link Source [$]

[4.3]

AI-Powered Hacking Surge Sparks 'Black October' Website Security Warning (news18.com)

1d 4h

[4.1]

AI cyber threats boost cybersecurity stocks (jp.investing.com)

1d 23h

Link Source (Japanese)

[4.0]

PHP Foundation's single full-time staffer highlights funding crisis after critical flaws exposed (thestar.com.my)

1d 14h

[3.9]

PHP's 70% web share rests on one full-time employee and 14 contractors (timesofindia.indiatimes.com)

1d 4h

[3.7]

Two critical PHP flaws took down hundreds of websites after a security disclosure went wrong (01net.com)

1d 6h

Link Source (French)

[3.7]

FBI warns businesses to patch or remove vulnerable PHP systems immediately (businesstoday.in)

1d 12h

[3.6]

PHP critical flaws expose millions of servers to remote takeover (economictimes.indiatimes.com)

1d 7h

[3.5]

AI can help companies test cyber defenses and prioritize fixes (jpost.com)

3h

[3.1]

PHP vulnerabilities expose millions of services to remote code execution risk (timesofindia.indiatimes.com)

1d 17h

[3.0]

Hong Kong orders urgent security checks after critical PHP flaws found (thestar.com.my)

3h

[2.9]

Anthropic security chief warns cyber threats will worsen before improving (xataka.com)

1d 19h

Link Source (Spanish)

[2.6]

PHP shares mitigation for unpatched RCE vulnerability (bleepingcomputer.com)

1d 21h

[2.3]

PHP patches two critical flaws after possible attack (neoteo.com)

1d 2h

Link Source (Spanish)

[2.3]

PHP 8.2-8.5 Critical Flaws Enable Remote Code Execution (salesforce.com)

1d 20h

[2.0]

Astra Security releases free tools to detect PHP2Shell vulnerabilities (scotsman.com)

1d 23h

[1.9]

UAE firms patch PHP flaw as 4,691 local servers face exposure risk (khaleejtimes.com)

9h