로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷

로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page kr/news/datanet/news-articleview-html, snapshot 20261028T032724Z. Copied byte for byte; every file's sha256 is in captures/20261028T032724Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

A Korean IT-trade piece (Datanet, 26 October) reporting that the security company Logpresso released a free PHP2Shell vulnerability scanner for its SIEM and XDR customers, following an advisory it posted on 21 October. It repeats that the PHP security team released patches on 21 October for supported PHP 8.2 to 8.5, that reports put versions since 5.4.0 in scope, and that whether a system is actually patched depends on the operating system distribution and device vendor advisories as well as the PHP version number. Logpresso stresses that a vulnerability scan does not show past compromise, and that internal assets as well as internet-facing ones should be checked.

> 취약점 진단과 침해 여부 확인은 구분해야 한다.

_Curator's translation:_ "Vulnerability scanning and checking for compromise must be kept separate."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷". Selected mechanically, not read by a person.

Capture notes

Language ko. A vendor product announcement relayed by the press. Nothing in the page addresses an AI or hides text from a reader.