Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure

https://hackread.com/wp-content/uploads/2026/10/insignary_logo_1791211062PNrqmaRSIt.jpg

Toronto, Canada, November 6th, 2026, CyberNewswire

Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively exploited vulnerabilities in PHP and Node.js

Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and Node2Shell, two recently disclosed runtime vulnerabilities affecting PHP and Node.js.

PHP2Shell refers to two vulnerabilities in the PHP runtime (CVE-2026-109618 and CVE-2026-109619), each rated 9.2 (Critical) under CVSS v4.0, that can allow an unauthenticated attacker to execute code remotely. Servers that handle web requests with PHP are at risk, including deployments using Apache mod_php, PHP-FPM, php-cgi, FrankenPHP, and LiteSpeed. The PHP Project released fixes on October 21, 2026, in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and earlier have reached end of life and no longer receive official releases. Because the flaws sit in the runtime itself rather than in application code, code review...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE

Read more