PHP2Shell: a flaw in PHP itself — attackers are already trying it. Check your site. What to do →ru/en

Contact us Check my site

Exposure guides

Short write-ups: how to read findings and what to do when a fresh flaw hits the news. To check a site, start separately — free on Radar.

Check my site for free

How to read findings

How to tell if a CVE affects youA match ≠ a breach: two statuses in plain words KEV and EPSS in plain languageStart with flaws already used in attacks Passive vs active checks: the differenceObservation from outside vs a careful probe — and where the line is

When a flaw hits the news

PHP2Shell: what to do if your site runs PHPCritical PHP RCE: checklists by site type WordPress on KEV: what to do about CVE-2026-87902WordPress Core on KEV: update checklist NGINX Rift: what to do on nginx and VMBitrixNGINX Rift + VMBitrix: update checklist OpenSSL CVE-2026-45447: who it really affectsOpenSSL in the news ≠ your HTTPS is broken: where the real risk is