Find every PHP server affected by CVE-2026-109618 and CVE-2026-109619

Two new PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are out. There are also referred to as php2shell

Run this in ShadowTrackr to find all your php servers:

$software_overview_report software=php* last_seen>-7d

You get every host where PHP was detected in the last 7 days, across all your domains, subdomains and IPs, with the detected version for each.

• software=php* matches every PHP version string.
• last_seen>-7d drops decommissioned hosts, so you only see what's exposed now.

Patch internet-facing hosts first