Check your server in 5 minutes
Free, without email address. Copy the assignments and compare your results with the information from your supplier.
1.PHP version
Run php -v. Safe upstream versions are at least 8.5.12, 8.4.27, 8.3.36 or 8.2.35. Linux distributions may provide a patched package with an older number, check the changelog for CVE-2026-109618 and CVE-2026-109619.
php -v2.Old PHP versions
If you are running PHP 8.1 or older, arrange for a supported version or a supplier with backports. PHP 8.2 will end on December 31, 2026.
php -v3.Restart
Restart PHP-FPM, Apache, FrankenPHP or LiteSpeed after the update. Rebuild container images.
4.Kernel
Run uname -r and check with your distribution if the running kernel is patched. An installed kernel only protects after a restart.
uname -r5.Fragnesia
Check the patch status of CVE-2026-46300.
6.Node and .NET
Check whether Node2Shell, CVE-2026-111497, is resolved in your runtime and dependencies.
7.Tracks
Look for unknown PHP files, new admin accounts and unexpected processes. If you suspect abuse, contact a specialist before restarting the server, because memory may contain evidence. Then replace keys and passwords.
Are you unsure, or would you like to have this checked? View the server scan.