Catalogue record · hackernews

Free checker for the PHP2Shell flaw that works on old, slow sites

Free PHP2Shell checker. PHP released an emergency fix on 21 October 2026 (8.5.12, 8.4.27, 8.3.36, 8.2.35) for critical remote code execution flaws (CVSS 9.2). PHP 8.1 and older get no official release. Check one site or ten, and get it fixe

检查老旧、慢速网站是否存在 PHP2Shell 漏洞，PHP 8.1 及更早版本无官方修复。

1 HN pointsNo checkout found

Where it was found

simgen.dev/php-patch-check

Seen on hackernews · last checked 2026-10-22.

What this page does not show

The teardown — how it actually charges, which mechanism was found, and the seam worth taking — is in the daily letter. This page carries the record and the signals so search engines and link previews have something real to read; the judgement stays with the readers who asked for it.

Get the daily letter

Read it in context

The same record sits in the full catalogue, where every entry can be searched and filtered by the signals above.