Insignary releases free tool to detect PHP2Shell and Node2Shell exposures
Original title: Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
insignary-chk is a free read-only scanner that helps organizations find Linux servers and container images exposed to PHP2Shell and Node2Shell vulnerabilities.
Insignary released insignary-chk, a free tool to detect PHP2Shell and Node2Shell. PHP2Shell vulnerabilities allow unauthenticated remote code execution in PHP runtimes used by Apache mod_php, PHP-FPM and others. Node2Shell is an out-of-bounds write flaw in Node.js Brotli library. Fixes released October 21, 2026. CISA added both to KEV catalog. Tool requires no installation, runs only on Linux x86_64 and flags end-of-life versions for review.
- Free single-file tool at insignary.com
- Checks Brotli outside Node.js
- No network transmission by default
- Ranks findings by urgency
- Complements Insignary Clarity SCA
- Vendors
- Insignary
- Products
- PHPNode.jsinsignary-chk
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109618+1 related CVE | OOM longjmp memory flaw enabling RCE in PHP | 9.2 | 100% | KEVPoC ×25 | KEV |
| CVE-2026-111497 | Buffer overflow in Google Brotli decoder 1.0.3–1.2.0 | 9.2 | 83% | KEVPoC ×25 | KEV |
From the original article
3 min read at gbhackers.com
Toronto, Canada, November 6th, 2026, CyberNewswire Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively exploited vulnerabilities in PHP and Node. js Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and Node2Shell, two recently disclosed runtime vulnerabilities affecting PHP and Node. js.
By CyberNewswire · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.