Security· ★★★· neutral·

OpenAI open-sources php2shell checker for critical PHP flaw

  • —Tool checks PHP versions against CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2
  • —Runs as a Codex skill or standalone Node.js script with JSON output for automation
  • —URL mode sends only a HEAD request and reads Server and X-Powered-By headers
  • —OpenAI warns that an UNKNOWN result does not mean the system is patched
Why it matters: About 70% of websites run PHP, so the flaw threatens crypto exchange and project infrastructure, raising the risk of phishing and wallet address tampering.
Source: 動區 BlockTempo
More on this
Security · 18:24
Theori reproduces critical PHP2Shell flaw in PHP engine, issues emergency guidance
 Security · 05:42
Critical PHP2Shell flaw threatens crypto exchanges and payment gateways
 Security · 13:21
CZ Warns Crypto Users as Critical PHP Flaws Threaten Websites