Website tot test whether your web server is vulnerable to PHP2Shell:
php2shell.aikido.ioAre you affected? — AikidoAn owner-run check for PHP multipart memory exhaustion (CVE-2026-109618 and CVE-2026-109619). Powered by Aikido.
XFEDI
ActivityPubConversation
Modsecurity with CoreRuleset indeed blocks this.