Observed arrival · 2026-10-25
PHP Vulnerability Tracker
An unofficial PHP2Shell briefing with a version checker, remediation guidance, and reports on affected sites and outages.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- PHP operators checking affected runtime versions
- Worth noticing
- The version checker runs in the browser and explicitly cannot detect vendor backports.
Field notes
The checker requires a complete PHP version and compares it with the upstream release numbers listed on the page; it does not account for vendor backports. The briefing also distinguishes reported exploitation attempts from confirmed incidents, noting a retracted report involving an unnamed government agency and saying it found no confirmed compromise of a named production website.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue