Titanium Computing logoMYSAFESITEby Titanium Computing
Live check · Free · threat feed updated Oct 22, 1:15 PM CT

Is Your Website Safe This Week?

Critical PHP flaws (CVE-2026-109618) and the Railway hosting breach expose small-business sites. MySafeSite checks yours the way an attacker would see it, then grades it A to F across five pillars.

PHP + WordPress detection · Host status live · Firewall, SSL and email spoofing · Report emailed to you · About 20 seconds

Safety report · exampleLive · not cached
D
64 / 100Weighted across five pillars
PHP & Platform9 / 30
Hosting & Exposure25 / 25
Firewall & Edge11 / 15
Encryption & Headers8 / 15
Email Spoofing11 / 15
FixPHP 8.1.27 is end of life and exposed to CVE-2026-109618. Worth 21 points.
Checking Running

We only look at what any visitor can see. We never log in or try to break anything.

01 This week's threats

What Is Hitting Business Websites Right Now.

Pulled live from CISA's list of actively exploited vulnerabilities, new critical CVEs in the National Vulnerability Database, and hosting providers' own status pages. threat feed updated Oct 22, 1:15 PM CT.

Hitting websites
CVSS 9.2 CVE-2026-109618 · 2026-10-20
Critical PHP flawCVE-2026-109618 and CVE-2026-109619 are critical holes in PHP itself. Every WordPress, Drupal, Joomla or Magento site on an unpatched PHP version is exposed. Fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
incident · 2026-10-21
Railway hosting breachRailway disclosed that an attacker accessed customer environment variables, where apps keep API keys and database passwords. Every key stored on Railway should be replaced.
actively exploited CVE-2016-3081 · 2026-10-08
Apache StrutsApache Struts Command Injection Vulnerability. Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enab…
actively exploited CVE-2026-87902 · 2026-09-25
WordPress CoreWordPress Core Remote File Inclusion Vulnerability. WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable l…
actively exploited CVE-2026-71362 · 2026-09-24
Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability . Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated…
CVSS 9.8 CVE-2026-108107 · 2026-10-09
PHP2 vulnerabilities: CVE-2026-108107, CVE-2021-48016. PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters int…
Hosting providers reporting problems right now
Hitting business networks this week
actively exploited CVE-2026-106931 · 2026-10-20
EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability. EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrar…
actively exploited CVE-2026-96656 · 2026-10-20
Plex Media Server4 vulnerabilities: CVE-2026-96656, CVE-2026-96655, CVE-2026-96654, CVE-2026-96652. Plex Media Server External Control of File Name or Path Vulnerability. Plex Media Server contains an external control of file name or pat…
actively exploited CVE-2026-110936 · 2026-10-20
Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element Vulnerability. Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a speci…
actively exploited CVE-2026-102764 · 2026-10-16
BeyondTrust Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability. BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operat…
actively exploited CVE-2025-61624 · 2026-10-16
FortinetFortinet Multiple Products Path Traversal Vulnerability. FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at lea…
actively exploited CVE-2026-21589 · 2026-10-15
AtlassianAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability. Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Softwar…

Firewalls, VPNs and remote-access tools are on this list too. Ask Titanium Computing to check yours.

02 The five pillars

Five Pillars. One Weighted Grade.

Every check rolls up into a 0 to 100 score and an A to F letter grade. Any urgent issue caps the grade at D. The report tells you what failed, why it matters and what to fix first.

30%

PHP & Platform

PHP version against the CVE fix list, WordPress and other CMS, exposed login and XML-RPC.

25%

Hosting & Exposure

Who hosts you, whether it is Railway, and your provider's live status page.

15%

Firewall & Edge

Cloudflare, Sucuri or another shield in front of your server.

15%

Encryption & Headers

SSL certificate, forced HTTPS, old TLS and browser security headers.

15%

Email Spoofing

SPF and DMARC, so nobody can send email pretending to be you.

An outside check cannot see everything. Many servers hide their PHP version, and good firewalls block scans. When that happens we say so plainly, and we can confirm from the inside in a few minutes.

03 Find your PHP version

Don't Know Your PHP Version? Here's How.

Many servers hide it from the outside, so this is the fastest way to know whether CVE-2026-109618 affects you. Pick your host, then type the version below.

04 Talk to a technician

Sound Like A Lot Of Work? Schedule A Call.

Titanium Computing patches PHP, rotates exposed keys and puts a firewall in front of your site, usually the same day. Tell us when to call.

Titanium Computing
Brought to you by

Titanium Computing

Managed IT and cybersecurity for Texas businesses, from Georgetown and Austin. When the check finds something, we fix it, usually the same day. (512) 623-9199 · Contact us