php2shell-scanner

~ Check PHP2Shell (CVE-2026-109618, CVE-2026-109619) from inside your server: distribution backports, missed restarts and interim mitigations, verdicts computed in the browser.

git clone https://github.com/debuman/php2shell-scanner.git

test/fixtures/distro.json (1322B)

      1 {
      2   "updated_at": "2026-10-23T00:00:00.000Z",
      3   "schema": 1,
      4   "debian": {
      5     "12": {
      6       "codename": "bookworm",
      7       "packages": {
      8         "php8.2": { "pro": false, "fixed": { "CVE-2026-109618": "8.2.35-1~deb12u1", "CVE-2026-109619": "8.2.35-1~deb12u1" } }
      9       }
     10     },
     11     "14": {
     12       "codename": "forky",
     13       "packages": {
     14         "php8.4": { "pro": false, "fixed": { "CVE-2026-109618": null, "CVE-2026-109619": null } }
     15       }
     16     }
     17   },
     18   "ubuntu": {
     19     "20.04": {
     20       "codename": "focal",
     21       "packages": {
     22         "php7.4": { "pro": true, "fixed": { "CVE-2026-109618": "7.4.3-4ubuntu2.29+esm5", "CVE-2026-109619": "7.4.3-4ubuntu2.29+esm5" } }
     23       }
     24     },
     25     "22.04": {
     26       "codename": "jammy",
     27       "packages": {
     28         "php8.1": { "pro": false, "fixed": { "CVE-2026-109618": "8.1.2-1ubuntu2.28", "CVE-2026-109619": "8.1.2-1ubuntu2.28" } }
     29       }
     30     },
     31     "24.04": {
     32       "codename": "noble",
     33       "packages": {
     34         "php8.3": { "pro": false, "fixed": { "CVE-2026-109618": "8.3.6-0ubuntu0.24.04.13", "CVE-2026-109619": "8.3.6-0ubuntu0.24.04.13" } }
     35       }
     36     }
     37   },
     38   "redhat": {
     39     "9": {
     40       "advisories": [
     41         { "cve": "CVE-2026-109618", "advisory": "RHSA-2026:87151", "package": "php-0:8.0.30-8.el9_8.1" }
     42       ],
     43       "states": []
     44     }
     45   },
     46   "redhat_notes": {}
     47 }