Known vulnerabilities
Software versions still receive security fixes
Published CVEs affecting the software versions your servers reveal.
Why it matters
The vendor no longer fixes this release line. Every vulnerability discovered from now on stays open for good, and compliance frameworks (PCI DSS, ISO 27001, cyber insurance questionnaires) treat unsupported software as a finding on its own.
How to fix it
Involved · may take days- Plan the upgrade to a supported release line; test the application against it first.
- Upgrade, or move to a hosting plan that provides a supported version.
- Re-run the scan to confirm the new version.
Check the installed version
php -v node -v nginx -v apache2 -v
Debian / Ubuntu (PHP from the distribution)
sudo apt update && apt list --upgradable | grep -i php
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free