PHP2Shell - CVE-2026-109618 and CVE-2026-109619
Use this query if you don't have the Falcon Spotlight in your CrowdStrike subscription. Use this to identify any PHP running in your environment. We used this to quickly identify hosts running PHP.
CQL
Use this query if you don't have the Falcon Spotlight in your CrowdStrike subscription. Use this to identify any PHP running in your environment. We used this to quickly identify hosts running PHP.
Already have an account?