EXP IP Scanner 1.4.2

Cleaner security results, focused on the checks we can trust.

Version 1.4.2 removes the Synology DSM vulnerability-verdict layer introduced in 1.4.1 after real-world testing showed that passive DSM metadata could create more noise than useful certainty. The proven PHP2Shell security checks remain.

Synology still gets identified

EXP IP Scanner still recognizes Synology DSM web services during passive HTTP and HTTPS fingerprinting. What is gone are the DSM-specific Critical, Needs Review, patched, and informational vulnerability cards.

PHP2Shell remains the security focus

The Security pass continues to look for PHP version evidence and assess the known PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 when enough patch-level evidence is exposed. Hidden or vendor-managed PHP still stays in manual-review territory rather than being guessed vulnerable.

LAN and website checks are unchanged

You can still run Security across discovered devices or open Website Security Check and enter a hostname or URL directly. The checks remain read-only and passive.

No exploit traffic

EXP IP Scanner does not try credentials, send exploit payloads, execute code, or make destructive changes. The vulnerability check uses ordinary HTTP and HTTPS response metadata for fast field triage.