Trend Micro Ships Free PHP2Shell Exposure Checker
The security vendor also began a seven-day free offer of its TrendLife PHP vulnerability web shielding for small and medium businesses.
Trend Micro announced on October 23, 2026 that it has released a free tool called PHP2Shell Exposure Checker to assess whether a website's PHP may be affected by the critical PHP vulnerability PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, according to internet.watch.impress.co.jp.
The checker is used by entering a website URL; it then examines HTTP headers and other responses to judge exposure. Both the tool and its messages are in English.
The company also said it has begun offering TrendLife PHP vulnerability web shielding, a service aimed at small and medium businesses. It works by relaying traffic to a customer's website through a cloud reverse proxy and blocking attacks.
TrendLife PHP vulnerability web shielding can be used free of charge for seven days, according to Trend Micro.
Quick answers
What does PHP2Shell Exposure Checker do?
It checks whether a website's PHP may be affected by the PHP2Shell vulnerability by examining HTTP headers and other responses after a URL is entered. The tool and its messages are in English.
How long is TrendLife PHP vulnerability web shielding free?
The service can be used free for seven days.
Which vulnerability does PHP2Shell refer to?
PHP2Shell is tracked under the identifiers CVE-2026-109618 and CVE-2026-109619.