Nicheloom visits: 29,054 all-time · 11,440 in the last 7 days

The opportunity tracker for new startups.

Today: 1,144 launches · Niche of the day: consumer buying and practical guides · See full report →

php_uploadprogress_guard

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 111 upvotes (top 12%)

Similar launches

See all 134 similar launches →

Could you build this?

Partial The extension itself is small, but it is a C extension that must hook PHP internals correctly across PHP 5.6 to 8.5, and a security stopgap for a CVE needs expert verification before anyone should deploy it.

What it would actually take: The build is a small C extension that unregisters or neutralizes the session upload-progress handler at MINIT, packaged for Debian/Sury and cPanel/DirectAdmin. The hard part is confirming the fix against the actual vulnerability across many PHP versions without breaking legitimate uploads. That takes a C developer comfortable with PHP internals and someone who can validate the exploit path.

Competitors

Other products that read as similar to this one : 134 launches clear the similarity bar, closest 8 shown.

Attention rank: #19 of 135 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 304 days after the earliest competitor.

Other launches for this product

More details
External ID
1428129890
Company
n/a
Product
php_uploadprogress_guard
Website domain
hosted-power.com
Cohort
n/a
Upvotes percentile
0.88
All tags
cve-2026-109618, cve-2026-109619, mitigation, php, php-extension, php2shell, security
AI summary
php extension stopgap against upload-progress handler cve
Manually corrected
No