About
FixCloud PHP Security Check lets FixCloud customers passively check whether the PHP version on their own sites is patched against the critical CVE-2026-109618 and CVE-2026-109619 vulnerabilities.
What is sent to targets
At most 2 normal requests to the home page (/) only: HEAD, and GET if needed. Response bodies are not read. No requests to private/internal addresses.
Scanner identity (User-Agent)
FixCloud-PHP-Security-Check/1.0 (+https://php-check.fixcloud.com.tr/about)
If you believe this tool sent unauthorized requests to your site, contact us: destek@fixcloud.com.tr
Legal notice
This service may only be used for domains you own or are authorized in writing to test. It only reads public HTTP response headers and makes no exploit attempts. Results are based on passive detection and are not guaranteed. Unauthorized use is prohibited (Turkish Penal Code arts. 243–245 and applicable law); if detected, your access code will be revoked and, where necessary, reported to the authorities. All scans are logged. For a definitive answer, check php -v and the package version on your server.