Check your server in 5 minutes

Free, without email address. Copy the assignments and compare your results with the information from your supplier.

  1. 1.PHP version

    Run php -v. Safe upstream versions are at least 8.5.12, 8.4.27, 8.3.36 or 8.2.35. Linux distributions may provide a patched package with an older number, check the changelog for CVE-2026-109618 and CVE-2026-109619.

    php -v
  2. 2.Old PHP versions

    If you are running PHP 8.1 or older, arrange for a supported version or a supplier with backports. PHP 8.2 will end on December 31, 2026.

    php -v
  3. 3.Restart

    Restart PHP-FPM, Apache, FrankenPHP or LiteSpeed after the update. Rebuild container images.

  4. 4.Kernel

    Run uname -r and check with your distribution if the running kernel is patched. An installed kernel only protects after a restart.

    uname -r
  5. 5.Fragnesia

    Check the patch status of CVE-2026-46300.

  6. 6.Node and .NET

    Check whether Node2Shell, CVE-2026-111497, is resolved in your runtime and dependencies.

  7. 7.Tracks

    Look for unknown PHP files, new admin accounts and unexpected processes. If you suspect abuse, contact a specialist before restarting the server, because memory may contain evidence. Then replace keys and passwords.

Are you unsure, or would you like to have this checked? View the server scan.