Usage statistics
Aggregate of every passive php2shell check reported by connected browser extensions. Patched releases: 8.2.35 · 8.3.36 · 8.4.27 · 8.5.12.
449
Total checks
449
Checks today
447
Unique hosts
2
Vulnerable hosts
0
Patched hosts
11
Undetermined
Checks per day (last 14 days)
10-22
vulnerable
patched
undetermined
no PHP evidence
Detected PHP versions
| Version | Checks |
|---|---|
| PHP 8.2.33 | 1 |
| PHP 8.3.24 | 1 |
CVE coverage
CVE-2026-109618
CVSS 9.2
Out-of-memory corruption
Memory exhaustion corrupts PHP-core state, enabling unauthenticated remote code execution on the target server.
CVE-2026-109619
CVSS 9.2
Stale global state across requests
Request state persists across PHP worker reuse, leaking sensitive memory (credentials, tokens, keys) and enabling code execution.
Recent checks
| Host | Verdict | PHP | Input | Checked at (UTC) |
|---|---|---|---|---|
| notifications-pa.googleapis.com | not php | — | nextdns | 2026-10-22 05:26:38 |
| pay-users-pa.googleapis.com | not php | — | nextdns | 2026-10-22 05:26:27 |
| androidpay-users-pa.googleapis.com | not php | — | nextdns | 2026-10-22 05:26:27 |
| voilatile-pa.googleapis.com | not php | — | nextdns | 2026-10-22 05:23:37 |
| e2c47.gcp.gvt2.com | not php | — | nextdns | 2026-10-22 05:21:04 |
| mds.ing.com.au | not php | — | nextdns | 2026-10-22 05:21:03 |
| api.mobile.ing.com.au | not php | — | nextdns | 2026-10-22 05:20:31 |
| o4509057566376016.ingest.de.sentry.io | not php | — | nextdns | 2026-10-22 05:20:29 |
| playgateway-pa.googleapis.com | not php | — | nextdns | 2026-10-22 05:20:23 |
| semanticlocation-pa.googleapis.com | not php | — | nextdns | 2026-10-22 05:20:00 |
| geoip.immediatemedia.co.uk | not php | — | nextdns | 2026-10-22 05:19:20 |
| cdn.greenvideo.io | not php | — | nextdns | 2026-10-22 05:19:18 |
| consent.bbcgoodfood.com | not php | — | nextdns | 2026-10-22 05:19:18 |
| images.immediate.co.uk | not php | — | nextdns | 2026-10-22 05:19:16 |
| www.datadoghq-browser-agent.com | not php | — | nextdns | 2026-10-22 05:19:16 |
| cp.bbcgoodfood.com | not php | — | nextdns | 2026-10-22 05:19:16 |
| euw2.production.ai.zephr.com | not php | — | nextdns | 2026-10-22 05:19:15 |
| app.slickstream.com | not php | — | nextdns | 2026-10-22 05:19:15 |
| api.permutive.app | not php | — | nextdns | 2026-10-22 05:19:14 |
| www.bbcgoodfood.com | not php | — | nextdns | 2026-10-22 05:19:13 |
| 2.thatopenly.com | not php | — | nextdns | 2026-10-22 05:19:13 |
| c.slickstream.com | not php | — | nextdns | 2026-10-22 05:19:13 |
| 1.thatopenly.com | not php | — | nextdns | 2026-10-22 05:19:13 |
| 3.thatopenly.com | not php | — | nextdns | 2026-10-22 05:19:12 |
| 0.thatopenly.com | not php | — | nextdns | 2026-10-22 05:19:12 |