PHP2Shell: Identify Vulnerable PHP Versions and Locate Residual PHP Files (CVE-2026-109618, CVE-2026-109619)

Finds devices running PHP versions that may be affected by CVE-2026-109618 or CVE-2026-109619. Shows the detected PHP versions, vulnerability status, and file paths to help identify and remove outdated PHP files.

Microsoft Sentinel (KQL)