Show HN: A small audit script and config notes for the new PHP CVEs

Category: security

Tags: php, security, cve, hardening, audit-script

Score: 4.0/10 (Innovation: 3, Technical: 4, Documentation: 6, Utility: 3)

This repository provides an audit shell script and configuration hardening notes for two hypothetical PHP CVEs (CVE-2026-109618 and CVE-2026-109619), claiming alignment with vendor and agency mitigations. It bundles security recommendations like disabling session upload progress, recycling PHP-FPM workers, and decommissioning mod_php, but the CVEs appear to be fabricated and the project has zero community traction.

Target audience: devops and security engineers

Repository: https://github.com/mc493/php2shell-enterprise-hardening-cve-2026-109618-109619 · Shell · MIT

View on Hacker News