India, Oct. 27 -- eScan, the cybersecurity brand of MicroWorld, has released a free command-line scanner that lets organisations quickly identify which of their systems are exposed to two of October's most serious security events: the PHP2Shell remote-code-execution vulnerability in PHP, and the recoverable private keys discovered in certificates issued by the certificate authority eMudhra.

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pair of critical flaws in PHP core - the interpreter that runs a large share of the world's websites - rated 9.8 out of 10 on the CVSS v3.1 scale. The vulnerability allows an attacker to execute code on a server with no credentials and no user interaction. Because the flaw lives in the runtime itse...