Qualys offers FREE Services to help organisations find and fix PHP2Shell vulnerabilities

Qualys has announced that it is offering its solutions for free as a service to the community to help organisations detect, validate, and mitigate their exposure to PHP2Shell, two critical vulnerabilities in PHP tracked as CVE-2026-109618 and CVE-2026-109619. The service is free for 15 days for up to 1000 assets from the time of activation. The vulnerabilities are each rated CVSS v4.0 9.2 and attack traffic has already been reported.