PHP2Shell
Which PHP version is running there?
The check reads the PHP version a site sends in its public headers and compares it with the fixes for CVE-2026-109618 and CVE-2026-109619.
What the lights mean
Critical
The number is older than 8.2.35, 8.3.36, 8.4.27 or 8.5.12, or the branch is older. Ask the hoster whether a fix was applied anyway.
Attention
PHP 8.2 from 8.2.35 includes the fix and stops receiving security updates after 31 December 2026.
Patched
The reported number includes the fix from 21 October 2026.
Unknown
The server does not report a usable PHP version. The hosting panel is the place to confirm it.