Penta Security Launches Cloudbric Security Check to Identify PHP2Shell Vulnerabilities

Author : John Brown | Published On : 27 Oct 2026

Penta Security has introduced a PHP2Shell vulnerability assessment tool to help organizations identify potential website exposure to critical PHP security flaws. The new Cloudbric Security Check service examines publicly visible server information, identifies exposed PHP versions, and recommends appropriate remediation steps. The launch addresses growing concerns about PHP2Shell, a pair of remote code execution vulnerabilities that could allow attackers to compromise vulnerable systems.

Cloudbric Security Check Simplifies Vulnerability Assessment

Cloudbric Security Check allows website administrators to assess potential PHP2Shell exposure without installing additional software. Users enter their website URL, and the service examines server response information to identify the PHP version visible externally.

The tool then provides recommended actions and prioritizes remediation steps based on its findings. Its non-intrusive assessment process does not attempt to exploit the vulnerabilities, allowing administrators to conduct an initial check within seconds.

When the URL-based assessment cannot identify the server's PHP version, Penta Security provides an assessment script. Administrators can use this script to check the PHP version running on the server and review relevant configuration settings.

The service supports English, Korean, and Japanese, making it accessible to organizations across multiple markets.

Penta Security Expands Protection Against PHP2Shell Attacks

Alongside the assessment service, Penta Security has strengthened its defenses against PHP2Shell exploitation attempts. The company distributed customized security rules and configuration guidance to customers using its WAPPLES intelligent web application firewall.

Penta Security also implemented relevant protective rules within Cloudbric WAF+, its cloud-based web application firewall service. These measures help identify and block malicious requests targeting the vulnerabilities.

PHP2Shell refers to two PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Attackers may exploit affected systems without authentication, potentially enabling unauthorized code execution.

Although web application firewalls can help reduce exposure, organizations must install the appropriate PHP security updates to address the underlying vulnerabilities. Temporary protective rules can provide an additional layer of defense while administrators prepare and deploy patches.

Security Teams Need Faster Vulnerability Response

Jihae Lee, Chief Compliance Officer at Penta Security, emphasized the importance of keeping security responses aligned with the accelerating pace of vulnerability analysis and attacks.

The Cloudbric Security Check service aims to help organizations quickly understand their potential exposure, identify necessary remediation measures, and take appropriate action.

Automated vulnerability assessments can also help security teams identify exposed systems more efficiently. By combining initial vulnerability checks with firewall protections and timely software updates, organizations can improve their ability to respond to emerging threats.

A Layered Approach to PHP2Shell Risk Management

Penta Security's latest initiative combines vulnerability assessment, remediation guidance, and web application firewall protections to help organizations manage PHP2Shell risks.

Organizations should use the assessment results as an initial indicator rather than definitive proof that a system is secure or compromised. They should also verify the PHP version running on their servers, apply the relevant security updates, and investigate suspicious activity where necessary.

By combining these measures, security teams can reduce exposure to PHP2Shell attacks and strengthen their overall vulnerability management practices.

SOC News provides the latest updates, insights, and trends in cybersecurity and security operations.