Qualys offers free services to help organisations quickly find and fix PHP2Shell vulnerabilities

Qualys has announced it is offering its solutions for free as a service to the community to help organisations detect, validate and mitigate their exposure to PHP2Shell, two critical vulnerabilities in PHP tracked as CVE-2026-109618 and CVE-2026-109619. The service is free for 15 days for up to 1,000 assets from the time of activation. Shailesh Athalye, Chief Product Solutions Officer of Qualys The vulnerabilities are each rated CVSS v4.0 9.2 and attack traffic has already been reported.