gabriele pieretti it / EN

FREE CHECK

Does your website server have the latest security fixes?

PHP: on 21 October 2026 CERT-AGID flagged new vulnerabilities, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Apache: the fix for a flaw in the HTTP/2 module (CVE-2026-119618) is in Apache 2.4.71. Enter your site address: I look at what the server declares and tell you what it means.

For business owners with a website: Free check of your website, I look at it myself and tell you what to fix.

Only check sites you manage or have permission to check. How it works: one normal request to the home page, like a browser would make. I read only the Server and X-Powered-By headers and the HTTP version of the reply. No vulnerability is tried, nothing else on the site is touched and the address is not stored.

Why the headers are not enough

Many servers hide the PHP and Apache versions: it is good practice, and it means the check cannot conclude anything. Hosting providers also often put a proxy or a CDN in front, which removes these headers.

Some Linux distributions, such as Ubuntu and Red Hat, fix flaws in their own packages without changing the version number: a server that declares an old version may already be fixed. In that case the result tells you to ask your provider, not that you are exposed.

A header can say one thing while the server runs another: it is information, not proof. That is why the result never says "safe".

Sources: CERT-AGID, bulletin of 21 October 2026, PHP supported versions and the Apache httpd security notice.

Questions

Is this check legal? Does it attack my site?

No. It makes one ordinary request to the home page, the same a browser makes, and reads the headers of the reply. It does not try any vulnerability. Still, only check sites you manage.

Is the address I check stored?

No. The address is used for the request and then discarded; it is not written to logs or databases. It reaches me only if you fill in the form below the result.

My hosting is managed: do I have to do anything?

Ask the provider which PHP and Apache versions your plan uses and when they apply the fixes. On many shared hosting plans you choose the PHP version from the control panel.

What is HTTP/2 and why does it matter?

It is the version of the protocol the browser uses to talk to the server, active on many HTTPS sites. The Apache flaw goes through it: if HTTP/2 is not active, the server is probably not affected. I read it from the same reply, with no extra requests.

Intro call · 30 minutes · free

If you prefer, we can go through it together on a call: thirty minutes, free.

Book the 30 minutes(opens in a new tab)

or write to info@gabrielepieretti.dev · I reply the same day

Also on WhatsApp or by phone: +39 338 563 9821