Penta Security has launched the Cloudbric Security Check service in response to recently disclosed PHP remote code execution vulnerabilities known as PHP2Shell. This tool helps companies verify whether their website is vulnerable to PHP2Shell attacks. In addition, it offers instructions on how to fix this problem.
Cloudbric Security Check requires no software installation. Users simply enter a website URL to identify the PHP version exposed externally. Consequently, administrators can assess whether the website might be affected by major flaws. Based on the results, the tool provides necessary response measures and their order of priority.
Additionally, the service uses a non-intrusive assessment method. It checks server response information without attempting to exploit PHP2Shell vulnerabilities. Therefore, the platform delivers accurate results within seconds. Anyone can access the service through the official Penta Security and Cloudbric websites.
For websites that are not able to identify the PHP version from the URL check, Penta Security offers an assessment script that allows the user to confirm the PHP version being used by the server. Additionally, the administrator can assess the settings of the server that relate to it. Depending on the result, the organization may take appropriate action, which may include a software upgrade and a temporary mitigation rule. At present, the service is available in English, Korean, and Japanese.
Immediate Automated Defense and WAF Protections for PHP2Shell
Immediately after disclosures emerged, Penta Security distributed custom security rules and configuration guidance to WAPPLES intelligent web application firewall customers. These updates defend networks against active exploits targeting PHP2Shell vulnerabilities. The company also applied relevant response rules to its cloud security service, Cloudbric WAF+.
Technically, PHP2Shell refers collectively to the PHP remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619. Attackers can exploit these flaws without authentication. The fundamental solution requires updating to a patched PHP version. However, where immediate patching is difficult, organizations can use web application firewalls to block malicious exploit requests. This approach mitigates risk effectively until administrators apply official server patches.
Jihae Lee, CCO (Chief Compliance Officer) of Penta Security, said, “As AI and automation technologies accelerate vulnerability analysis and attacks to unprecedented levels, organisations must ensure that their security response can keep pace. We hope that organisations which find it difficult to immediately determine their PHP operating environment and exposure to these vulnerabilities can use the Cloudbric Security Check site to quickly understand their current exposure, identify the necessary response measures and proceed with appropriate action.”
Mitigating Operational Risks with Proactive Vulnerability Auditing
Meanwhile, automated scanning scripts allow defenders to pinpoint exposed PHP2Shell entry points across critical enterprise systems. By automating vulnerability detection, teams reduce exposure windows against automated attack bots.
Ultimately, Penta Security strengthens enterprise resilience against dangerous PHP2Shell threats. Combining non-intrusive scanning with active firewall enforcement provides complete, layered protection for global digital operations.
For related updates on digital trust and cybersecurity, explore our SOC News.
News Source: EINPresswire.com
