PHP CVE Checker

Checks a website for CVE-2026-109618 and CVE-2026-109619 (critical PHP remote code execution).

Passive check: the site's advertised PHP version (X-Powered-By / Server header) is compared against the affected ranges (8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12). No exploit traffic is sent.