Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure

What happened?

Toronto, Canada, November 6th, 2026, CyberNewswire Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively exploited vulnerabilities in PHP and Node.js Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and Node2Shell, two recently disclosed runtime vulnerabilities affecting PHP and Node.js.

Key details

• Insignary released a free read-only scanner called insignary-chk to detect PHP2Shell and Node2Shell vulnerabilities.
• PHP2Shell comprises two critical PHP runtime flaws allowing unauthenticated remote code execution.
• Affected PHP deployments include Apache mod_php, PHP-FPM, php-cgi, FrankenPHP, and LiteSpeed.
• Node2Shell is an out-of-bounds write in Google's Brotli library bundled with Node.js, enabling crashes, memory exposure, or remote code execution.
• CISA has added both PHP2Shell and Node2Shell to its Known Exploited Vulnerabilities catalog.
• insignary-chk is a single file requiring no installation, runs read-only by default, and sends no network data unless the user specifies an address.
• The tool also checks Brotli copies outside Node.js, such as the system Brotli library and Python's brotli package.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.