Company news
Exaforce Releases ExaPHP2Shell Detection Tool for PHP2Shell Vulnerability
Published 22 October 2026
WHAT HAPPENED
Exaforce released ExaPHP2Shell, a detection tool for scanning PHP sites vulnerable to the PHP2Shell vulnerability. The vulnerability, patched by PHP yesterday, consists of two bugs that enable remote code execution through out-of-memory corruption and stale global state.
WHO IS INVOLVED
Exaforce researcher Bleon Proko analyzed the PHP2Shell vulnerability and led development of the detection tool. The vulnerability affects PHP installations used natively and through content management systems.
WHY IT MATTERS
PHP2Shell grants remote code execution on PHP-based websites, and because PHP runs on a massive number of sites globally, the potential attack surface is extremely large. Organizations can now use ExaPHP2Shell to identify and remediate affected systems.
- Type
- Product launch
- Category
- Security Operations
- Source
- linkedin.com ↗
See Exaforce’s full company record.
Look up its funding history, investors, hiring and competitors in Mandos. Choose a platform plan, or unlock this one company for free.
- Funding history and investors
- Hiring trends and departments
- Competitor comparisons
- Scores and supporting data