eScan Launches Free Scanner for PHP2Shell and Weak TLS Certificates

https://www.itvoice.in/wp-content/uploads/2026/10/ITVoice-Feature-Image-2026-10-27T164047.020.jpg

eScan, the cybersecurity brand of MicroWorld, today released a free command-line scanner that lets organisations quickly identify which of their systems are exposed to two of October’s most serious security events: the PHP2Shell remote-code-executionvulnerability in PHP, and the recoverable private keys discovered in certificates issued by the certificate authority eMudhra.

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pair of critical flaws in PHP core – the interpreter that runs a large share of the world’s websites – rated 9.8 out of 10 on the CVSS v3.1 scale. The vulnerability allows an attacker to execute code on a server with no credentials and no user interaction. Because the flaw lives in the runtime itself rather than in any single application, every site a vulnerable server hosts is at risk. The bugs were fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, while older branches receive limited or no official fixes. According...

Copyright of this story solely belongs to www.itvoice.in. To see the full text click HERE

Read more