Following the disclosure of two critical security vulnerabilities in the PHP programming language, which powers websites and digital services around the world, cybersecurity company Levinity Cyber is offering organizations a targeted check designed to help identify servers that may be exposed to the flaws.
The vulnerabilities, known as PHP2Shell, could allow attackers to take over vulnerable systems remotely, even without login credentials. The risk is especially relevant for organizations running internet-facing servers, particularly older software versions or systems that have not been updated.
A check that does not exploit the flaw
The check offered by Levinity Cyber is non-intrusive: instead of trying to exploit the vulnerability, the company examines the PHP version details a server reveals in ordinary network requests and compares them with the versions for which official security fixes have been published.
This gives an organization an initial indication of possible exposure and of the need to update, without triggering the vulnerability, without running attack tools and without reading or changing any data in the organization's systems.
"An initial picture, without putting operations at risk"
Moshe Levi, co-founder and CTO of Levinity Cyber, explains: "The first challenge for organizations is understanding which of their systems may be exposed. Not every organization knows which software versions all of its servers are running, and sometimes it is precisely the older systems that are left out of the regular update process."
In his words, "Our goal is to let organizations get an initial picture quickly and in a way that does not put their operations at risk. There is no need to try to break into a server to check whether the software version it reports falls within the vulnerable range. At the same time, it is important to understand that the check does not replace an in-depth security assessment, and cannot determine whether a system has already been compromised."
Only with prior approval
The company stresses that the check is carried out only against servers the organization has approved in advance and in writing. When the PHP version cannot be identified, the finding is marked "uncertain" and further checking is required.
Levinity Cyber recommends that organizations make sure the PHP versions they use are up to date in line with official security guidance, and separately examine whether there are signs that the vulnerabilities have already been exploited.
The company emphasizes that the check provides a point-in-time exposure assessment based on publicly visible information only, and is not confirmation that a server is secure or free of other vulnerabilities.
