PHP2Shell CVE-2026-109618/109619 PHP installed and active exposure

Nathan Corrigan@LemonKQL

•updated today•95•1•148

Detects and correlates installed PHP software packages and active PHP process execution across endpoints using device inventory, configuration data, and system logs to provide exposure visibility for PHP environments.