Checkmk 2.5 extension that shows for every PHP installation on a Linux host (PHP-FPM, CGI, CLI, Apache mod_php, NGINX Unit, FrankenPHP) whether it is affected by PHP2Shell (CVE-2026-109618 / CVE-2026-109619): fixed by version or distribution backport, vulnerable with or without interim mitigations, and processes still running a replaced PHP binary. Tested on 17 distribution setups, Checkmk 2.5 and 3.0 daily.
This is not intended to be exhaustive.
I did not develop this MKP officially as an employee of Checkmk GmbH, but rather as a private individual.