Check your website for PHP2Shell
Enter a domain — we will estimate the risk from public signs in the server response.
Olimp Digital
Zhytomyr, Ukraine
Regina, Canada
What is the PHP2Shell vulnerability (CVE-2026-109618, CVE-2026-109619)
TODO(ТЗ): article content about the PHP2Shell vulnerability will be provided separately.
Why Olimp Digital
TODO(ТЗ): trust block copy will be provided separately.
Frequently Asked Questions (FAQ)
Is this check safe for my website?
Yes. The quick check only performs a standard GET request to the homepage, just like a regular browser, and never sends exploit payloads.
Why does the quick check say "Deep check required"?
Many production servers hide the X-Powered-By header or run Linux distribution builds with backported patches. A deep check via our temporary agent script lets domain owners inspect the exact PHP version.
Which PHP versions are patched against PHP2Shell?
Fixes are included in PHP 8.5.12+, 8.4.27+, 8.3.36+, and 8.2.35+. PHP 8.1 and older branches are End of Life (EOL).