Free tool · No signup
Is your website exposed to the critical PHP flaw?
On October 21, 2026, PHP fixed two critical flaws (CVE-2026-109618 and CVE-2026-109619) that can let attackers take over a web server without logging in. PHP runs an estimated 70% of websites. Enter your site to see if it runs PHP and whether it looks patched.
What this check does, and does not do
- It reads only what your website shows every visitor: headers, cookies and the homepage.
- It never tests the vulnerability or sends anything harmful to your site.
- It is an estimate, not a security audit. For a definite answer, ask your host or developer.
Get security alerts like this every Monday
AgentVet Weekly covers AI agent incidents, security and reliability, with sources.