Free Security Diagnostic Tool
PHP Vulnerability Checker (CVE-2026-109618 / 109619)
Input your current PHP runtime version to verify if your servers are affected by the critical PHP2Shell remote code execution vulnerabilities.
PHP Affected & Patched Versions Reference Matrix
| PHP Branch | Minimum Secure Version | Status | Mitigation |
|---|---|---|---|
| PHP 8.5 | 8.5.12 | Official Fix | Upgrade to 8.5.12+ |
| PHP 8.4 | 8.4.27 | Official Fix | Upgrade to 8.4.27+ |
| PHP 8.3 | 8.3.36 | Official Fix | Upgrade to 8.3.36+ |
| PHP 8.2 | 8.2.35 | Official Fix | Upgrade to 8.2.35+ |
| PHP 8.1 | EOL (Unpatched) | Vulnerable | Set session.upload_progress.enabled = Off |
| PHP 7.4–8.0 | EOL (Unpatched) | Vulnerable | Set session.upload_progress.enabled = Off |
| PHP 5.4–5.6 | EOL (Unpatched) | Vulnerable | Set session.upload_progress.enabled = Off |
Emergency Mitigation Configuration
Add this single line to your global php.ini and reload worker daemons:
session.upload_progress.enabled = Off