Coremedia Solution.
开始一个项目
PHP2Shell

Which PHP version is running there?

The check reads the PHP version a site sends in its public headers and compares it with the fixes for CVE-2026-109618 and CVE-2026-109619.

One ordinary request, not an attack. Up to five addresses. If the server hides its version, the result stays unknown. A hoster fix that keeps the old version number is invisible here.

What the lights mean

Critical
The number is older than 8.2.35, 8.3.36, 8.4.27 or 8.5.12, or the branch is older. Ask the hoster whether a fix was applied anyway.
Attention
PHP 8.2 from 8.2.35 includes the fix and stops receiving security updates after 31 December 2026.
Patched
The reported number includes the fix from 21 October 2026.
Unknown
The server does not report a usable PHP version. The hosting panel is the place to confirm it.