Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure

Critical remote code execution vulnerabilities in PHP (PHP2Shell) and Node.js (Node2Shell) have been added to CISA's Known Exploited Vulnerabilities catalog, signaling active exploitation in the wild. A key complexity highlighted by this incident is that exposure can exist not just in directly installed packages but also within bundled or nested libraries—such as Brotli—making manual tracking unreliable. Organizations without automated vulnerability scanning across their servers and container images may remain exposed without knowing it. The release of a free detection tool underscores how widespread the exposure likely is, and how urgently organizations need structured processes to discover and remediate these flaws before attackers exploit them.