Ncurity offers PHP2Shell response support via Censys platform
Ncurity, Censys's sole Korean distributor, says customers can locate exposed PHP services by domain and IP and check patch status.
Ncurity announced on October 30, 2026, that it is supporting customers in responding to the PHP2Shell vulnerability through the Censys internet intelligence platform, according to datanet.co.kr. Ncurity is Censys's sole domestic distributor in Korea.
The support identifies exposed PHP services using a customer's domain and IP information, and recommends checking the PHP version in use and applying security updates. Ncurity also advises verifying vulnerable versions and patch status directly on the running system, since exposed services may not display version information.
Censys maintains an official PHP2Shell dashboard that shows exposed PHP response versions by country, network and version, along with patch progress. Customers of Censys ASM can identify PHP-based assets in their externally exposed asset lists and review related risk information.
Two critical PHP flaws
PHP2Shell comprises two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may allow remote code execution without authentication. The PHP project rated each 9.2 on the CVSS v4.0 scale and designated them critical.
Censys ARC published an urgent security advisory on PHP2Shell containing search queries, patch information and indicators of compromise to check in logs.
Quick answers
What is PHP2Shell?
PHP2Shell is a set of two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may allow remote code execution without authentication. Both were rated 9.2 on the CVSS v4.0 scale.
How is Ncurity helping customers with PHP2Shell?
Ncurity identifies exposed PHP services by a customer's domain and IP information using the Censys platform, and recommends checking the PHP version in use and applying security updates.